CVE-2002-2330

CVE-2002-2330 is a documented XSS vulnerability in StatsPlus 1.25, affecting the stat.pl script. The issue allows remote attackers to inject arbitrary script/HTML by manipulating HTTP_USER_AGENT or HTTP_REFERER, which is written to stats.html and executed in client browsers. The vulnerability is ...