CVE-2006-7126: joomla bsq_sitestats

EPSS trend

Probability

1.22%

Chance of exploitation in the next 30 days

Percentile

68%

Versus all other CVEs

30-day change

+0.04 pp

From 1.18% on 21-09-2026

21-09-202621-10-2026

EPSS score

1.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

6 links

www.vupen.com/english/advisories/2006/4090VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/20614VDB EntryX Refsource BIDPatch
www.securityfocus.com/archive/1/449125/100/0/threadedMailing ListX Refsource BUGTRAQ
exchange.xforce.ibmcloud.com/vulnerabilities/29662VDB EntryX Refsource XF
developer.joomla.org/sf/sfmain/do/viewProject/projects.bsq_sitestatsX Refsource CONFIRM
secunia.com/secunia_research/2006-65/advisory/X Refsource MISCVendor Advisory

Related vulnerabilities

CVE-2006-4995joomlabsq_sitestats1.83%20y ago26-09-2006 01:43PHP remote file inclusion vulnerability in BSQ Sitestats (bsq_sitestats) before 2.1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.CVE-2006-7125joomlabsq_sitestats1.24%19y ago06-03-2007 01:00Cross-site scripting (XSS) vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled when the administrator views site statistics.CVE-2006-7124joomlabsq_sitestats1.72%19y ago06-03-2007 01:00PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to execute arbitrary PHP code via the baseDir parameter.CVE-2006-7123joomlabsq_sitestats1.15%19y ago06-03-2007 01:00Multiple SQL injection vulnerabilities in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allow remote attackers to execute arbitrary SQL commands via (1) unspecified parameters when importing the (a) ip-to-country.csv file; and the (2) HTTP Referer, (3) HTTP User Agent, and (4) HTTP Accept Language headers to (b) bsqtemplateinc.php.CVE-2006-7122joomlabsq_sitestats1.24%19y ago06-03-2007 01:00Cross-site scripting (XSS) vulnerability in the IP Address Lookup functionality in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to inject arbitrary web script and HTML via the ip parameter.

All vulnerabilities inbsq_sitestats

CVE-2006-7126: joomla bsq_sitestats

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References