CVEvulnerability
CVE-2005-4012
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML via (1) the lastnumber parameter to stat.php and (2) the HTTP referer to pixel.php.
Affected configurations
• php web statistik 1.4
References
- http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html Vendor Advisory
- http://freewebstat.com/changelog-english.html freewebstat.com
- http://secunia.com/advisories/17789 Vendor Advisory
- http://www.osvdb.org/21208 www.osvdb.org
- http://www.osvdb.org/21212 www.osvdb.org
- http://www.securityfocus.com/bid/15603 www.securityfocus.com
- http://www.ush.it/2005/11/19/php-web-statistik/ Exploit, Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2005/2645 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23379 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23385 exchange.xforce.ibmcloud.com
- http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html Vendor Advisory
- http://freewebstat.com/changelog-english.html freewebstat.com
- http://secunia.com/advisories/17789 Vendor Advisory
- http://www.osvdb.org/21208 www.osvdb.org
- http://www.osvdb.org/21212 www.osvdb.org
- http://www.securityfocus.com/bid/15603 www.securityfocus.com
- http://www.ush.it/2005/11/19/php-web-statistik/ Exploit, Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2005/2645 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23379 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23385 exchange.xforce.ibmcloud.com