CVE-2005-4012: XSS
Multiple cross-site scripting (XSS) vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML via (1) the lastnumber parameter to stat.php and (2) the HTTP referer to pixel.php.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4012?
CVE-2005-4012 is considered a moderate severity vulnerability due to its ability to allow remote attackers to execute arbitrary scripts on affected systems.
How do I fix CVE-2005-4012?
To fix CVE-2005-4012, upgrade PHP Web Statistik to a version that is not affected by this vulnerability.
What are the affected components of CVE-2005-4012?
The affected components of CVE-2005-4012 are the stat.php and pixel.php files in PHP Web Statistik 1.4.
What types of attacks can CVE-2005-4012 facilitate?
CVE-2005-4012 can facilitate cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts into web pages.
Who is at risk from CVE-2005-4012?
Users and administrators of PHP Web Statistik version 1.4 are at risk from CVE-2005-4012, particularly those who have not applied security updates.