CVE-2005-4013

概要

参考情報

• cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html · Vendor Advisory
• freewebstat.com/changelog-english.html
• secunia.com/advisories/17789 · Vendor Advisory
• osvdb.org/21209
• osvdb.org/21210
• ush.it/2005/11/19/php-web-statistik · Patch
• vupen.com/english/advisories/2005/2645
• exchange.xforce.ibmcloud.com/vulnerabilities/23382

statistik のその他の脆弱性

• CVE-2005-4015中 5.0PHP Web Statistik 1.4 does not rotate the log database or limit the size of the referer field, which allows remote attackers to fill the log…
• CVE-2005-4014高 7.8stat.php in PHP Web Statistik 1.4 allows remote attackers to cause a denial of service (CPU consumption) via a large lastnumber value.
• CVE-2005-4012中 4.3Multiple cross-site scripting (XSS) vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML …