CVE-2008-6212 describes a Cross-Site Scripting (XSS) vulnerability in Php-Stats version 0.1.9.1, specifically within the admin.php script. Attackers can inject arbitrary web script or HTML through the 'sel_mese' and 'sel_anno' parameters when performing a 'systems' action. This vulnerability has a CVSS score of 4.3, indicating medium severity. It requires medium attack complexity and could lead to partial integrity impact, as it allows for client-side script execution. While not listed on the CISA KEV catalog or Hot List, exploit code for this XSS vulnerability is publicly available on ExploitDB. There is no evidence of active exploitation, and it has received minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
0.1.9.1CPE matchmatch criteria | cpe:2.3:a:php-stats:php-stats:0.1.9.1:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:N/I:P/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.