RedLevel Advisory #017 - PsychoStats v3.0.6b Multiple Cross-Site Scripting Vulnerabilities

PsychoStats v3.0.6b Multiple Cross-Site Scripting Vulnerabilities PsychoStats contains multiple cross-site scripting vulnerabilities that may be exploited through the URI. Vulnerable Files: awards.php, login.php, register.php, weapons.php - other files may also be susceptible to this vulnerabilit...

psychostats-xss.txt

PsychoStats v3.0.6b Multiple Cross-Site Scripting Vulnerabilities PsychoStats contains multiple cross-site scripting vulnerabilities that may be exploited through the URI. Vulnerable Files: awards.php, login.php, register.php, weapons.php - other files may also be susceptible to this vulnerabilit...

PsychoStats 3.0.6b - Multiple Scripts Multiple Cross-Site Scripting Vulnerabilities

PsychoStats 3.0.6b Multiple Scripts Multiple Cross-Site Scripting Vulnerabilities. Webapps exploit for php platform source: http://www.securityfocus.com/bid/24106/info PsychoStats is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. ...

CVE-2007-2780

PsychoStats 3.0.6b and earlier allows remote attackers to obtain sensitive information via a request for server.php with a missing or invalid newtheme parameter, which reveals a path in an error message...

[Full-disclosure] PsychoStats 3.0.6b and prior

newtheme variable only expects "sane" behaivor, no arguement or an arguement with any special character, etc.. will cause it to error and display the full path to $pathtohlstats/includes/smarty/Smarty.class.php $pathtohlstats/server.php?newcss=styles.css&newtheme=00 Ex: Warning: Smarty error:...

PsychoStats 2.3 - Server.php Full Path Disclosure

PsychoStats 2.3 - Server.php Full Path Disclosure source: https://www.securityfocus.com/bid/24039/info PsychoStats is prone to a path-disclosure issue when invalid data is submitted. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks...

PsychoStats 2.3 - 'Server.php' Full Path Disclosure

source: https://www.securityfocus.com/bid/24039/info PsychoStats is prone to a path-disclosure issue when invalid data is submitted. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable computer. PsychoStats 3.0.6b an...

PsychoStats Login Parameter Cross-Site Scripting

PsychoStats is a statistics generator for games. Currently there is support for a handful of Half-Life SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2004-1417

Cross-site scripting XSS vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter...

CVE-2004-1417

PsychoStats is affected: login.php in version 2.2.4 Beta and earlier is vulnerable to Cross-Site Scripting via the login parameter. Root cause: insufficient sanitization of the login parameter leading to arbitrary script execution. Impact aligns with CVSS 4.3 (medium). Remediation: upgrade to a v...

CVE-2004-1417

Cross-site scripting XSS vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter...

Cross Site Scripting In PsychoStats 2.2.4 Beta && Earlier

GulfTech Security Research December 22nd, 2004 Vendor : Jason Morriss URL : http://www.psychostats.com/ Version : PsychoStats 2.2.4 Beta && Earlier Risk : Cross Site Scripting Description: PsychoStats is a statistics generator for games. Currently there is support for a handful of Half-Life "MODs...

[SA13619] PsychoStats "login" Cross-Site Scripting Vulnerability

TITLE: PsychoStats "login" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA13619 VERIFY ADVISORY: http://secunia.com/advisories/13619/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PsychoStats 2.x http://secunia.com/product/4450/ DESCRIPTION: James...

PsychoStats 2.x Login Parameter Cross-Site Scripting Vulnerability

PsychoStats 2.x Login Parameter Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/12089/info PsychoStats is reported prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize...