XSS in Mystats

CVE-2006-6401

Multiple cross-site scripting (XSS) vulnerabilities in mystats.php in MyStats 1.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) connexion, (2) by, and (3) details parameter.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.017 (75.0th percentile) — read the EPSS interpretation.

Affected products

Mystats
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Mailing List)
cve@mitre.org (vdb-entry, Not Applicable, x_refsource_VUPEN)