CVE-2002-2330: Uninet Statsplus

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web script or HTML via (1) HTTP_USER_AGENT or (2) HTTP_REFERER, which is written to stats.html and executed in client browsers.

Affected products

• Uninet Statsplus: version 1.25 only

Published 2002-12-31. Last modified 2026-06-16.