← Database

CVE-2004-2028

MEDIUM CVSS: 4.3 Published: 2004-05-21 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in stats.php in e107 allows remote attackers to inject arbitrary web script or HTML via the referer parameter to log.php.

Affected Platforms

E107 E107

Weakness Type

NVD-CWE-Other

References