Multiple cross-site scripting (XSS) vulnerabilities in EQdkp 1.3.2c and earlier allow remote attackers to inject arbitrary web script or HTML via the show parameter to (1) listmembers.php and (2) stats.php. NOTE: some of these details are obtained from third party information.
Max CVSS
6.8
EPSS Score
2.39%
Published
2007-05-16
Updated
2017-07-29
1 vulnerabilities found