CVEvulnerability

CVE-2006-7125

6.8 MEDIUM Published 2007-03-06 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-03-06
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Cross-site scripting (XSS) vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled when the administrator views site statistics.

Affected configurations

• joomla bsq sitestats 1.8.0 • joomla bsq sitestats 2.1.1

References

http://secunia.com/secunia_research/2006-65/advisory/ Vendor Advisory
http://www.securityfocus.com/archive/1/449125/100/0/threaded www.securityfocus.com
http://www.securityfocus.com/bid/20614 Patch
http://www.vupen.com/english/advisories/2006/4090 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/29661 exchange.xforce.ibmcloud.com
http://secunia.com/secunia_research/2006-65/advisory/ Vendor Advisory
http://www.securityfocus.com/archive/1/449125/100/0/threaded www.securityfocus.com
http://www.securityfocus.com/bid/20614 Patch
http://www.vupen.com/english/advisories/2006/4090 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/29661 exchange.xforce.ibmcloud.com