NVD

Id
65668  
Name
CVE-2006-7125  
Description
Cross-site scripting (XSS) vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled when the administrator views site statistics.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2007-03-05  
Modified Date
2011-03-07  
Seq
2006-7125  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
342050 65668 CVE-2006-7125 20061018 Secunia Research: Joomla BSQ Sitestats Script Insertion and SQLInjection  View
342051 65668 CVE-2006-7125 20614  View
342052 65668 CVE-2006-7125 ADV-2006-4090  View
342053 65668 CVE-2006-7125 bsq-sitestats-http-referer-xss(29661)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54437 JVNDB-2007-003129 Joomla BSQ Sitestats におけるクロスサイトスクリプティングの脆弱性 Joomla BSQ Sitestats には、管理者がサイト統計を見る際に適切に処理されないため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-7125 23227 CVE-2006-7125 65668 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003129.html 2007-03-05 2012-09-25 View