TI-2010-05046 CVE-2010-10010 · GHSA-j46h-rhfq-fcxj
Stars Alliance PsychoStats login.php cross site scripting
Priority LOW 28
A vulnerability classified as problematic has been found in Stars Alliance PsychoStats up to 3.2.2a.
Vulnerabilities
6 records
TI-2013-03242 CVE-2013-3721 · GHSA-vwm9-gjvv-8287
SQL injection vulnerability in awards.php in PsychoStats 3.2.2b allows remote attackers…
Priority LOW 37
SQL injection vulnerability in awards.php in PsychoStats 3.2.2b allows remote attackers to execute arbitrary SQL commands via the d parameter.
TI-2008-06114 CVE-2008-6422 · GHSA-wmrc-f373-7hgg
Multiple SQL injection vulnerabilities in PsychoStats 2.3, 2.3.1, and 2.3.3 allow remote…
Priority LOW 35
Multiple SQL injection vulnerabilities in PsychoStats 2.3, 2.3.1, and 2.3.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) weapon.php and (2) map.php.
TI-2007-02821 CVE-2007-2914 · GHSA-vr38-8gfv-mcvj
Multiple cross-site scripting (XSS) vulnerabilities in PsychoStats 3.0.6b allow remote…
Priority LOW 23
Multiple cross-site scripting (XSS) vulnerabilities in PsychoStats 3.0.6b allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) awards.php, (2) login.php, (3) register.php, (4) weapons.ph…
TI-2007-02691 CVE-2007-2780 · GHSA-p97m-3j95-cgxq
PsychoStats 3.0.6b and earlier allows remote attackers to obtain sensitive information…
Priority LOW 28
PsychoStats 3.0.6b and earlier allows remote attackers to obtain sensitive information via a request for server.php with a missing or invalid newtheme parameter, which reveals a path in an error message.
TI-2004-01294 CVE-2004-1417 · GHSA-3fv9-wxfp-xvfh
Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and…
Priority LOW 24
Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter.