CVE-2014-9349

Name of the Vulnerable Software and Affected Versions RobotStats version 1.0

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via the nom or user agent parameters to the "admin/robots.php" endpoint.

Recommendations For RobotStats version 1.0, as a temporary workaround, consider restricting access to the "admin/robots.php" endpoint until a patch is available. Avoid using the nom and user agent parameters in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.