CVE-2005-4012

Vendorphp webProductstatistikDiscoveredDec 5, 2005UpdatedApr 16, 2026

Multiple cross-site scripting (XSS) vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML via (1) the lastnumber parameter to stat.php and (2) the HTTP referer to pixel.php.

View graph Watch Export

CVSS v3.1

—

EPSS

1.85%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

Connections

1 relationships

statistik

source

Timeline

disclosure → media coverage

Dec 5, 2005

Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026