CVE-2007-2914

Multiple cross-site scripting XSS vulnerabilities in PsychoStats 3.0.6b allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 awards.php, 2 login.php, 3 register.php, 4 weapons.php, and possibly other unspecified files...

CVE-2007-2914

Summary: CVE-2007-2914 concerns PsychoStats 3.0.6b with multiple cross-site scripting (XSS) flaws. The vulnerability allows remote attackers to inject arbitrary web script/HTML via PATH_INFO to several PHP endpoints (awards.php, login.php, register.php, weapons.php) and possibly other files. The ...