CVE ID:	CVE-2007-2812
Description:	Cross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.35, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) the action parameter.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2812 BugTraq ID: 24063 http://www.securityfocus.com/bid/24063 BugTraq ID: 24102 http://www.securityfocus.com/bid/24102 Bugtraq: 20070519 RedLevel Advisory #016 - HLstats v1.35 Cross-Site Scripting Vulnerability (Google Search) http://www.securityfocus.com/archive/1/469087/100/0/threaded Bugtraq: 20070519 RedLevel Advisory #017 - HLstats v1.35 Cross-Site Scripting Vulnerability #2 (Google Search) http://www.securityfocus.com/archive/1/469088/100/0/threaded http://osvdb.org/36215 http://secunia.com/advisories/25340 http://securityreason.com/securityalert/2724 http://www.vupen.com/english/advisories/2007/1882 XForce ISS Database: hlstats-action-xss(34383) https://exchange.xforce.ibmcloud.com/vulnerabilities/34383 XForce ISS Database: hlstats-unspecified-xss(34382) https://exchange.xforce.ibmcloud.com/vulnerabilities/34382