CVE-2006-7125

Joomla BSQ Sitestats 1.8.0 and 2.2.1 - Cross-Site Scripting via HTTP Referer Header

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled when the administrator views site statistics.

References (5)

Core 5
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/4090
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/20614
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/449125/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/29661

Scores

EPSS 0.0005
EPSS Percentile 14.3%

Details

Status published
Products (2)
joomla/bsq_sitestats 1.8.0
joomla/bsq_sitestats 2.1.1
Published Mar 06, 2007
Tracked Since Feb 18, 2026