CVE-2002-2330

MEDIO 5.0CVE-2002-2330 · Published 31/12/2002 · updated 16/06/2026

In breve

CVE-2002-2330 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda statsplus (uninet).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.2%, superiore al 67.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
statsplus uninet	`= 1.25`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web script or HTML via (1) HTTP_USER_AGENT or (2) HTTP_REFERER, which is written to stats.html and executed in client browsers.

References

online.securityfocus.com/archive/1/284254
iss.net/security_center/static/9678.php
securityfocus.com/bid/5316

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free