CVE-2004-2028 – e107 Website System 0.5/0.6 - 'Log.php' HTML Injection

https://notcve.org/view.php?id=CVE-2004-2028

21 May 2004 — Cross-site scripting (XSS) vulnerability in stats.php in e107 allows remote attackers to inject arbitrary web script or HTML via the referer parameter to log.php. • https://www.exploit-db.com/exploits/24138 •