Description
stat.php in PHP Web Statistik 1.4 allows remote attackers to cause a denial of service (CPU consumption) via a large lastnumber value.
References
- ADV-2005-2645 vdb-entry
- http://freewebstat.com/changelog-english.html
- 21211 vdb-entry
- phpwebstatistik-stat-dos(23384) vdb-entry
- 20051128 Php Web Statistik Multiple Vulnerabilities mailing-list
- 17789 third-party-advisory
- http://www.ush.it/2005/11/19/php-web-statistik/