CVE-2001-0835: Bradford Barrett Webalizer

High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in (1) search keywords embedded in HTTP referrer information, or (2) host names that are retrieved via a reverse DNS lookup.

Affected products

• Bradford Barrett Webalizer: up to and including 2.0.6

Published 2001-12-06. Last modified 2026-06-16.