CVE-2006-2174

CVE-2006-2174 concerns multiple cross-site scripting (XSS) vulnerabilities in VHCS’s admin/server_day_stats.php. The issue allows remote attackers to inject arbitrary web script or HTML by supplying one of three parameters: day, month, or year. This is documented across multiple sources (NVD, CVE...