CVE-2007-2847

Published: May 24, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in hlstats.php in HLstats 1.35, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) authusername or (2) authpassword parameter, different vectors than CVE-2007-0840 and CVE-2007-2812.

Affected (1)

Products: Hlstats: Hlstats

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hlstats Hlstats	Up to 1.35

References (8)

http://osvdb.org/36215

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/469291/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/24102

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34450

Source: cve@mitre.org

http://osvdb.org/36215

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/469291/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/24102

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/34450

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.