CVE-2010-10010

CVE-2010-10010 affects Stars Alliance PsychoStats versions up to 3.2.2a. The vulnerability is an XSS flaw arising from manipulation of the ref parameter in an unknown section of file upload/admin/login.php. It can be exploited remotely. A fix is available in PsychoStats 3.2.2b (patch identifier 5...