phpTrafficA 'statsRecent.inc.php' cross-site scripting vulnerability

phpTrafficA is a statistical tool for website traffic analysis. A cross-site scripting vulnerability exists in phpTrafficA 'statsRecent.inc.php'. Due to the program failing to properly filter user-supplied input. Allowing an attacker to exploit this vulnerability to execute arbitrary code in the...

phpTrafficA 2.3 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Product: phpTrafficA Product page: http://soft.zoneo.net/phpTrafficA/ Affected versions: Up to and including 2.3 latest as of writing. Description: The user agent string provided by the browser is not sanitized nor escaped when handled. This string ...