CVE-2007-2780

CVE-2007-2780 affects PsychoStats 3.0.6b and earlier. The issue is an information disclosure vulnerability where a remote attacker can trigger a request to server.php with a missing or invalid newtheme parameter and receive an error message that reveals a path. Base CVSS v2 score is 5.0 (Network,...

CVE-2007-2780

PsychoStats 3.0.6b and earlier allows remote attackers to obtain sensitive information via a request for server.php with a missing or invalid newtheme parameter, which reveals a path in an error message...