EUVD-2005-4007

Malware in sbrugna...

CVE-2005-3959

CVE-2005-3959 affects FreeWebStat 1.0 rev37. It describes multiple cross-site scripting (XSS) vulnerabilities where user-supplied input in the (1) site, (2) jsref, (3) jsres, (4) jscolor parameters to pixel.php and (5) the search key to stat.php are echoed into logdb.html without sanitization. Th...

CVE-2005-3959

Multiple cross-site scripting XSS vulnerabilities in FreeWebStat 1.0 rev37 allow remote attackers to inject arbitrary web script or HTML via the 1 site, 2 jsref, 3 jsres, and 4 jscolor parameters to pixel.php, which are not sanitized before being included in the logdb.html file, and 5 the search...

CVE-2005-3959

Multiple cross-site scripting XSS vulnerabilities in FreeWebStat 1.0 rev37 allow remote attackers to inject arbitrary web script or HTML via the 1 site, 2 jsref, 3 jsres, and 4 jscolor parameters to pixel.php, which are not sanitized before being included in the logdb.html file, and 5 the search...