Vulnerabilities > CVE-2006-4543 - Cross-Site Scripting vulnerability in Hlstats 1.34
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Cross-site scripting (XSS) vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web script or HTML via the (1) game parameter in players mode, the (2) weapon parameter in weaponinfo mode, the (3) st parameter in search mode, the (4) action parameter in actioninfo mode, and the (5) map parameter in mapinfo mode.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description | HLstats 1.34 Index.PHP Multiple Cross Site Scripting Vulnerabilities. CVE-2006-4543. Webapps exploit for php platform |
id | EDB-ID:28446 |
last seen | 2016-02-03 |
modified | 2006-08-30 |
published | 2006-08-30 |
reporter | MC.Iglo |
source | https://www.exploit-db.com/download/28446/ |
title | HLstats 1.34 Index.PHP Multiple Cross-Site Scripting Vulnerabilities |