Unscored CVE-2007-2812 EUVD-2007-2804GHSA-gh9c-cfrp-6xww

Cross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.35, and possibly earlier, allows remote attackers to inject arbitrary …

Published May 22, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.35, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) the action parameter.

References

24063 vdb-entry
ADV-2007-1882 vdb-entry
hlstats-unspecified-xss(34382) vdb-entry
2724 third-party-advisory
hlstats-action-xss(34383) vdb-entry
36215 vdb-entry
20070519 RedLevel Advisory #017 - HLstats v1.35 Cross-Site Scripting Vulnerability #2 mailing-list
25340 third-party-advisory
24102 vdb-entry
20070519 RedLevel Advisory #016 - HLstats v1.35 Cross-Site Scripting Vulnerability mailing-list