閱讀文章 - 看板 Bugtraq - 批踢踢實業坊

發信人root@hanicker.it,

看板Bugtraq

標題new XSS vulnerability in php-stats -tracking.php

發信站NCTU CSIE FreeBSD Server (Sat Sep 15 09:17:32 2007)

轉信站ptt!FreeBSD.csie.NCTU!not-for-mail

I found a new xss in php-stats 0.1.9.2 http://phpstats.net/ http://www.example.com/php-stats-path/tracking.php?what=online&ip=[XSS] Stats must have public access for this (difference from whois.php XSS).