Psychostats

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Psychostats records in CISA KEV

No Psychostats vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Psychostats 6 records LOW

Records

6 records

TI-2013-03242 CVE-2013-3721 · GHSA-vwm9-gjvv-8287

SQL injection vulnerability in awards.php in PsychoStats 3.2.2b allows remote attackers…

LOW 37

SQL injection vulnerability in awards.php in PsychoStats 3.2.2b allows remote attackers to execute arbitrary SQL commands via the d parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02224 Published 2013-05-31 No fix listed CWE-89

TI-2008-06114 CVE-2008-6422 · GHSA-wmrc-f373-7hgg

Multiple SQL injection vulnerabilities in PsychoStats 2.3, 2.3.1, and 2.3.3 allow remote…

LOW 35

Multiple SQL injection vulnerabilities in PsychoStats 2.3, 2.3.1, and 2.3.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) weapon.php and (2) map.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2009-03-06 No fix listed CWE-89

TI-2010-05046 CVE-2010-10010 · GHSA-j46h-rhfq-fcxj

Stars Alliance PsychoStats login.php cross site scripting

LOW 28

A vulnerability classified as problematic has been found in Stars Alliance PsychoStats up to 3.2.2a.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00489 Published 2023-06-01 No fix listed CWE-79

TI-2007-02691 CVE-2007-2780 · GHSA-p97m-3j95-cgxq

PsychoStats 3.0.6b and earlier allows remote attackers to obtain sensitive information…

LOW 28

PsychoStats 3.0.6b and earlier allows remote attackers to obtain sensitive information via a request for server.php with a missing or invalid newtheme parameter, which reveals a path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03017 Published 2007-05-21 No fix listed CWE-200

TI-2004-01294 CVE-2004-1417 · GHSA-3fv9-wxfp-xvfh

Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and…

LOW 24

Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0193 Published 2005-02-12 No fix listed CWE-79

TI-2007-02821 CVE-2007-2914 · GHSA-vr38-8gfv-mcvj

Multiple cross-site scripting (XSS) vulnerabilities in PsychoStats 3.0.6b allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in PsychoStats 3.0.6b allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) awards.php, (2) login.php, (3) register.php, (4) weapons.ph…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0153 Published 2007-05-30 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	4
Low	0
No CVSS	0