| ID |
CVE-2005-3959
|
| Summary |
Multiple cross-site scripting (XSS) vulnerabilities in FreeWebStat 1.0 rev37 allow remote attackers to inject arbitrary web script or HTML via the (1) site, (2) jsref, (3) jsres, and (4) jscolor parameters to pixel.php, which are not sanitized before being included in the logdb.html file, and (5) the search key to stat.php. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 4.3 (as of 19-10-2018 - 15:39) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
MEDIUM |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
PARTIAL |
NONE |
|
| cvss-vector
via4
|
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
| refmap
via4
|
| bid | 15601 | | bugtraq | 20051128 Free Web Stat Multiple XSS Vulnerabilities | | misc | | | osvdb | 21207 | | sectrack | 1015301 | | secunia | 17783 | | vupen | ADV-2005-2646 | | xf | - freewebstat-logdb-xss(23387)
- freewebstat-stat-search-xss(23391)
|
|
| Last major update |
19-10-2018 - 15:39 |
| Published |
01-12-2005 - 06:03 |
| Last modified |
19-10-2018 - 15:39 |
