CVE-2007-2812

CVE-2007-2812 affects HLstats HLstats 1.35 (and possibly earlier) with a cross-site scripting (XSS) flaw in hlstats.php that allows an attacker to inject arbitrary scripts via PATH_INFO or the action parameter. The connected documents confirm the vulnerability vectors but do not provide patch det...

hlstarts-xss2.txt

HLstats v1.35 - Cross-Site Scripting Vulnerability 2 HLstats v1.35 - Cross-Site Scripting Vulnerability 2 discovered by John Martinelli of RedLevel Security Google d0rk: "generated in real-time by HLstats" file hlstats.php - variable action - method get alert1"...

HLstats 1.34 - hlstats.php Cross-Site Scripting

HLstats 1.34 - hlstats.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19745/info HLstats is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data. Exploiting this issue may help the attacker steal cookie-based...