Approved changes feed: RSS · Atom

cpe:2.3:a:joomla:bsq_sitestats:2.1.1:*:*:*:*:*:*:*

part: a version: 2.1.1 update: *

VendorJoomla (6fa59c4b-5b62-59b9-bce0-735b9b6b6c51)
ProductBsq Sitestats (811ad285-1751-5a21-9ef3-2920fa2cbb73)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-7126 vulnerable 2026-06-08 04:49:30.387800 Details available
SQL injection vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the query string, possibly PHP_SELF.
Published: 2007-03-06T01:00:00.000Z
Updated: 2024-08-07T20:50:06.116Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-7125 vulnerable 2026-06-08 04:49:30.387354 Details available
Cross-site scripting (XSS) vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled when the administrator views site statistics.
Published: 2007-03-06T01:00:00.000Z
Updated: 2024-08-07T20:50:06.351Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4995 vulnerable 2026-06-08 04:49:19.453430 Details available
PHP remote file inclusion vulnerability in BSQ Sitestats (bsq_sitestats) before 2.1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Published: 2006-09-26T01:43:00.000Z
Updated: 2024-09-17T03:28:59.314Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.