Unscored CVE-2002-0944 EUVD-2002-0933GHSA-xfqj-f5hm-wqrw

Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the Li…

Published Aug 31, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the LiveStats user via the (1) user-agent or (2) referrer, which are not filtered by the stats program.

References

livestats-report-execute-code(9390) vdb-entry
http://www.deepmetrix.com/log_analyzer/xsp/service/release_notes/index.asp
5047 vdb-entry
20020617 DeepMetrix LiveStats javascript injection mailing-list