Vulnerabilities > CVE-2007-1871 - HTML Injection vulnerability in Chcounter 3.1.3

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
chcounter
NVD
Published: 2007-04-13
Updated: 2018-10-16

Summary

Cross-site scripting (XSS) vulnerability in chcounter 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the login_name parameter to /stats/. Successful exploitation requires that the target user is not logged in.

Vulnerable Configurations

Part Description Count
Application
Chcounter
1

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/55888/CVE-2007-1871.txt
idPACKETSTORM:55888
last seen2016-12-05
published2007-04-12
reporterHanno Boeck
sourcehttps://packetstormsecurity.com/files/55888/CVE-2007-1871.txt.html
titleCVE-2007-1871.txt

References