CVE-2008-0125
Phpstats - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in phpstats.php in Michael Wagner phpstats 0.1 alpha allows remote attackers to inject arbitrary web script or HTML via the baseDir parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Hanno Boeck · textwebappsphp
https://www.exploit-db.com/exploits/31414
References (4)
Scores
EPSS
0.0029
EPSS Percentile
52.1%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
phpstats/phpstats
Timeline
Published
Mar 24, 2008
Tracked Since
Feb 18, 2026