CVEvulnerability
CVE-2006-6401
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-12-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in mystats.php in MyStats 1.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) connexion, (2) by, and (3) details parameter.
Affected configurations
• mystats mystats (<= 1.0.8)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://marc.info/?l=bugtraq&m=116344068502988&w=2 Mailing List
- http://secunia.com/advisories/22813 Vendor Advisory
- http://securitytracker.com/id?1017210 Exploit, Third Party Advisory, VDB Entry
- http://www.osvdb.org/30319 Broken Link
- http://www.vupen.com/english/advisories/2006/4468 Not Applicable
- http://marc.info/?l=bugtraq&m=116344068502988&w=2 Mailing List
- http://secunia.com/advisories/22813 Vendor Advisory
- http://securitytracker.com/id?1017210 Exploit, Third Party Advisory, VDB Entry
- http://www.osvdb.org/30319 Broken Link
- http://www.vupen.com/english/advisories/2006/4468 Not Applicable