CVE-2007-2847

no score yetEPSS 1.8%

Multiple cross-site scripting (XSS) vulnerabilities in hlstats.php in HLstats 1.35, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) authusername or (2) authpassword parameter, different vectors than CVE-2007-0840 and CVE-2007-2812.

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
Published: 2007-05-24
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

hlstats:hlstats

References

http://osvdb.org/36215
http://www.securityfocus.com/archive/1/469291/100/0/threaded
http://www.securityfocus.com/bid/24102
https://exchange.xforce.ibmcloud.com/vulnerabilities/34450
http://osvdb.org/36215

Check your stack JSON