CVE-2006-7124: joomla bsq_sitestats

EPSS trend

Probability

1.72%

Chance of exploitation in the next 30 days

Percentile

77%

Versus all other CVEs

30-day change

+0.03 pp

From 1.69% on 21-09-2026

21-09-202621-10-2026

EPSS score

1.72%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

7 links

www.osvdb.org/29287VDB EntryX Refsource OSVDBPatch
www.securityfocus.com/bid/20267VDB EntryX Refsource BIDPatch
exchange.xforce.ibmcloud.com/vulnerabilities/29269VDB EntryX Refsource XF
developer.joomla.org/sf/sfmain/do/viewProject/projects.bsq_sitestatsX Refsource CONFIRM
securityreason.com/securityalert/2360Third Party AdvisoryX Refsource SREASON
www.securityfocus.com/archive/1/447356/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/secunia_research/2006-63/advisory/X Refsource MISCPatchVendor Advisory

Related vulnerabilities

CVE-2006-4995joomlabsq_sitestats1.83%20y ago26-09-2006 01:43PHP remote file inclusion vulnerability in BSQ Sitestats (bsq_sitestats) before 2.1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.CVE-2006-7125joomlabsq_sitestats1.24%19y ago06-03-2007 01:00Cross-site scripting (XSS) vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled when the administrator views site statistics.CVE-2006-7126joomlabsq_sitestats1.22%19y ago06-03-2007 01:00SQL injection vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the query string, possibly PHP_SELF.CVE-2006-7123joomlabsq_sitestats1.15%19y ago06-03-2007 01:00Multiple SQL injection vulnerabilities in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allow remote attackers to execute arbitrary SQL commands via (1) unspecified parameters when importing the (a) ip-to-country.csv file; and the (2) HTTP Referer, (3) HTTP User Agent, and (4) HTTP Accept Language headers to (b) bsqtemplateinc.php.CVE-2006-7122joomlabsq_sitestats1.24%19y ago06-03-2007 01:00Cross-site scripting (XSS) vulnerability in the IP Address Lookup functionality in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to inject arbitrary web script and HTML via the ip parameter.

All vulnerabilities inbsq_sitestats

CVE-2006-7124: joomla bsq_sitestats

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References