Lucene search
+L

3543 matches found

exploitpack
exploitpack
•added 2007/09/14 12:00 a.m.•20 views

PHP-Stats 0.1.9.2 - Tracking.php Cross-Site Scripting

PHP-Stats 0.1.9.2 - Tracking.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25674/info Php-Stats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

6.8AI score
SaveExploits0
NVD
NVD
•added 2007/08/14 6:17 p.m.•27 views

CVE-2007-4334

Cross-site scripting XSS vulnerability in whois.php in Php-stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML via the IP parameter...

4.3CVSS5.6AI score0.01773EPSS
SaveExploits2References6
Prion
Prion
•added 2007/08/14 6:17 p.m.•30 views

Cross site scripting

Cross-site scripting XSS vulnerability in whois.php in Php-stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML via the IP parameter...

4.3CVSS5.9AI score0.01773EPSS
SaveExploits2References6Affected Software1
Cvelist
Cvelist
•added 2007/08/14 6:00 p.m.•42 views

CVE-2007-4334

Cross-site scripting XSS vulnerability in whois.php in Php-stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML via the IP parameter...

5.6AI score0.01773EPSS
SaveExploits2References6
CVE
CVE
•added 2007/08/14 6:00 p.m.•64 views

CVE-2007-4334

The CVE-2007-4334 entry describes a cross-site scripting (XSS) vulnerability in Php-stats 0.1.9.2, specifically in whois.php. The underlying issue is an injection of arbitrary script/HTML via the IP parameter. This could allow an attacker to execute code in a victim’s browser when viewing the aff...

4.3CVSS5.6AI score0.01773EPSS
SaveExploits2References6Affected Software1
Packet Storm
Packet Storm
•added 2007/08/14 12:00 a.m.•31 views

phpstats-xss.txt

I have found an xss in whois.php page of php-stats. http://phpstats.net/ Here is the XSS php-stats-path/whois.php?IP=%22%3E%3Cscript%3Ealertdocument.cookie;%3C/script%3E...

0.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/08/14 12:00 a.m.•6 views

CVE-2007-4334: Undefined Security Weakness

Cross-site scripting XSS vulnerability in whois.php in Php-stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML via the IP parameter...

4.3CVSS6AI score0.01773EPSS
SaveExploits2References1
securityvulns
securityvulns
•added 2007/08/13 12:00 a.m.•63 views

php-stats xss whois.php

I have found an xss in whois.php page of php-stats. http://phpstats.net/ Here is the XSS php-stats-path/whois.php?IP=223E3Cscript3Ealertdocument.cookie;3C/script3E...

0.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2007/08/11 12:00 a.m.•15 views

PHP-Stats 0.1.9.2 - WhoIs.php Cross-Site Scripting

PHP-Stats 0.1.9.2 - WhoIs.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25275/info Php-Stats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scrip...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2007/08/11 12:00 a.m.•31 views

PHP-Stats 0.1.9.2 - 'WhoIs.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25275/info Php-Stats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

4.3CVSS5.8AI score0.01773EPSS
SaveExploits2
Patchstack
Patchstack
•added 2007/07/31 12:00 a.m.•19 views

WordPress Feed Stats Plugin <= 2.3 - Multiple XSS

Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML via unspecified vectors. Solution Update the plugin...

4.3CVSS3.2AI score0.05052EPSS
SaveExploits2References1Affected Software1
Prion
Prion
•added 2007/07/17 10:30 p.m.•16 views

Sql injection

SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL commands via the offset parameter...

7.5CVSS9.1AI score0.0101EPSS
SaveExploits2References3
NVD
NVD
•added 2007/07/17 10:30 p.m.•19 views

CVE-2007-3840

SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL commands via the offset parameter...

7.5CVSS8.4AI score0.0101EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2007/07/17 10:00 p.m.•27 views

CVE-2007-3840

SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL commands via the offset parameter...

8.4AI score0.0101EPSS
SaveExploits2References3
CVE
CVE
•added 2007/07/17 10:00 p.m.•55 views

CVE-2007-3840

CVE-2007-3840 describes an SQL injection in referralUrl.php within Traffic Stats, exploitable via the offset parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, impacting data confidentiality and integrity. Connected documents corroborate the vulnerability in t...

7.5CVSS8.4AI score0.0101EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/07/17 12:00 a.m.•4 views

CVE-2007-3840: Undefined Security Weakness

SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL commands via the offset parameter...

7.5CVSS6.4AI score0.0101EPSS
SaveExploits2References1
zdt
zdt
•added 2007/07/16 12:00 a.m.•90 views

Traffic Stats (referralUrl.php offset) Remote SQL Injection Vulnerbility

Exploit for unknown platform in category web applications ======================================================================== Traffic Stats referralUrl.php offset Remote SQL Injection Vulnerbility ========================================================================...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2007/07/16 12:00 a.m.•32 views

Traffic Stats - referralUrl.php?offset SQL Injection

Traffic Stats - referralUrl.php?offset SQL Injection --==+================================================================================+==-- --==+ Traffic Stats SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR:...

0.4AI score
SaveExploits0
Prion
Prion
•added 2007/06/27 12:30 a.m.•27 views

Sql injection

SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a stats action...

7.5CVSS9.1AI score0.01644EPSS
SaveExploits1References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/27 12:00 a.m.•8 views

CVE-2007-3427: Undefined Security Weakness

SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a stats action...

7.5CVSS6.4AI score0.01644EPSS
SaveExploits1References1
Rows per page
Query Builder