Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Gelato SQL Injection exploit

множественные уязвимости в Stride v1.0

Vulnerability in Nucleus

From:	root_(at)_hanicker.it <root_(at)_hanicker.it>
Date:	17.09.2007
Subject:	new XSS vulnerability in php-stats -tracking.php

I found a new xss in php-stats 0.1.9.2

http://phpstats.net/

http://www.example.com/php-stats-path/tracking.php?what=online&ip=[XSS]

Stats must have public access for this (difference from whois.php XSS).