CVE-2002-2330

Cross-site scripting XSS vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web script or HTML via 1 HTTPUSERAGENT or 2 HTTPREFERER, which is written to stats.html and executed in client browsers...

CVE-2002-2330

CVE-2002-2330 is a documented XSS vulnerability in StatsPlus 1.25, affecting the stat.pl script. The issue allows remote attackers to inject arbitrary script/HTML by manipulating HTTP_USER_AGENT or HTTP_REFERER, which is written to stats.html and executed in client browsers. The vulnerability is ...

CVE-2002-2330

Cross-site scripting XSS vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web script or HTML via 1 HTTPUSERAGENT or 2 HTTPREFERER, which is written to stats.html and executed in client browsers...