Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to the phpinfo action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
X-Stat存在跨站脚本执行漏洞
Vulnerability Description
X-Stat是一款PHP语言编写免费的WEB通信分析程序，可以运行在Unix和Linux操作系统下，也可运行在Microsoft Windows操作系统平台下。 X-Stat在脚本过滤实现上不充分，存在跨站脚本可执行而导致目标用户泄露基于COOKIE认证的敏感信息。 X-Stat中的x_stat_admin.php脚本对URL参数没有充分过滤，可导致恶意用户建立包含恶意脚本代码的连接，当此连接被WEB用户点击浏览时，脚本代码在WEB用户的浏览器中执行。 成功利用此漏洞可以导致攻击者获得WEB用户的基于CO
CVSS Information
N/A
Vulnerability Type
N/A