Verify input data cannot corrupt database, output, or getstats.pl. Especially of concern are single quotes in data, etc...
Also verify that the config.pl is not actually vulnerable to cross-site scripting type vuls...
Log in to post a comment.