4.3
CVSSv2

CVE-2007-3426

Published: 27/06/2007 Updated: 16/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in index.php in phpTrafficA 1.4.2 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the lang parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

zoneo-soft phptraffica

Exploits

Application: phpTrafficA <= 142 Web Site: softzoneonet/phpTrafficA/ Versions: all Platform: linux, windows Bug: injection sql ------------------------------------------------------- 1) Introduction 2) Bug 3) Proof of concept 4) Credits =========== 1) Introduction =========== "phpTrafficA is a GPL statistical tool for web traffic ...