medium4.3Public exploit code
CVE-2006-0317
Cross-site scripting (XSS) vulnerability in rkrt_stats.php in RedKernel Referrer Tracker 1.1.0-3 allows remote attackers to inject arbitrary web script or HTML…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RedKernel Referrer Tracker 1.1.0-3 - 'Rkrt_stats.php' Cross-Site Scripting2006-01-16 · webapps · php · Verified
Impact
Cross-site scripting (XSS) vulnerability in rkrt_stats.php in RedKernel Referrer Tracker 1.1.0-3 allows remote attackers to inject arbitrary web script or HTML via a query string value as a GET, which is stored in the $QUERY_STRING variable. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redkernel | Referrer Tracker | Version 1.1.0_3 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/18473
- http://www.securityfocus.com/bid/16266
- http://www.vupen.com/english/advisories/2006/0197
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24151
- http://secunia.com/advisories/18473
- http://www.securityfocus.com/bid/16266
- http://www.vupen.com/english/advisories/2006/0197
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24151