CVE-2009-4717

Multiple cross-site scripting (XSS) vulnerabilities in Gonafish WebStatCaffe allow remote attackers to inject arbitrary web script or HTML via the (1) host…

published March 15, 2010

CVSS
—
EPSS
1%
Percentile
70.0
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in Gonafish WebStatCaffe allow remote attackers to inject arbitrary web script or HTML via the (1) host parameter to stat/host.php, nodayshow parameter to (2) mostvisitpage.php and (3) visitorduration.php in stat/, (4) nopagesmost parameter to stat/mostvisitpagechart.php, and date parameter to (5) pageviewers.php, (6) pageviewerschart.php, and (7) referer.php in stat/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01292 · 70.0th percentile
Published
2010-03-15T21:00Z
EPSS history
Timeline
  • 15 MAR 21:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in Gonafish WebStatCaffe allow remote attackers to inject arbitrary web script or HTML via the (1) host…
    cvelistv5