Onderwerp: new XSS vulnerability in php-stats -tracking.php

I found a new xss in php-stats 0.1.9.2

http://phpstats.net/

http://www.example.com/php-stats-pat...hat=online&ip=[XSS]

Stats must have public access for this (difference from whois.php XSS).