3765Third-party advisory
http://securityreason.com/securityalert/3765 CVE-2008-0125
phpStats 0.1_alpha - 'phpStats.php' Cross-Site Scripting
Record summary
CVE-2008-0125 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in phpstats.php in Michael Wagner phpstats 0.1 alpha allows remote attackers to inject arbitrary web script or HTML via the baseDir parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBphpStats 0.1_alpha - 'phpStats.php' Cross-Site ScriptingExploitDB exploitby Hanno BoeckNot analyzed1 file
References
520080317 Cross Site Scripting (XSS) in phpstats 0.1_alpha, CVE-2008-0125mailing list
http://www.securityfocus.com/archive/1/489722/100/0/threaded 28291vdb entry
http://www.securityfocus.com/bid/28291 phpstats-phpstats-xss(41261)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/41261 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-0125