VULNERABILITY INTELLIGENCE

CVE-2005-3959

CVSS score4.3 NONE
EPSS probability4.78%
CISA KEVNot currently listed
Published2005-12-01
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Multiple cross-site scripting (XSS) vulnerabilities in FreeWebStat 1.0 rev37 allow remote attackers to inject arbitrary web script or HTML via the (1) site, (2) jsref, (3) jsres, and (4) jscolor parameters to pixel.php, which are not sanitized before being included in the logdb.html file, and (5) the search key to stat.php.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references