CVEvulnerability

CVE-2002-0944

7.5 HIGH Published 2002-10-04 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2002-10-04
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the LiveStats user via the (1) user-agent or (2) referrer, which are not filtered by the stats program.

Affected configurations

• deepmetrix livestats 6.2

References

http://archives.neohapsis.com/archives/bugtraq/2002-06/0207.html archives.neohapsis.com
http://www.deepmetrix.com/log_analyzer/xsp/service/release_notes/index.asp www.deepmetrix.com
http://www.iss.net/security_center/static/9390.php Vendor Advisory
http://www.securityfocus.com/bid/5047 Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-06/0207.html archives.neohapsis.com
http://www.deepmetrix.com/log_analyzer/xsp/service/release_notes/index.asp www.deepmetrix.com
http://www.iss.net/security_center/static/9390.php Vendor Advisory
http://www.securityfocus.com/bid/5047 Vendor Advisory