Description
PHP Web Statistik 1.4 does not rotate the log database or limit the size of the referer field, which allows remote attackers to fill the log files via a large number of requests, as demonstrated using pixel.php.
References
- http://freewebstat.com/changelog-english.html
- 20051128 Php Web Statistik Multiple Vulnerabilities mailing-list
- http://www.ush.it/2005/11/19/php-web-statistik/
- phpwebstatistik-disk-quota-dos(23386) vdb-entry
- 214 third-party-advisory