CVE-2006-6781

HLstats 1.20 through 1.34 allows remote attackers to obtain sensitive information via playinfo mode, with certain values of the player and playerdatalastName parameters, which reveals the path in an error message...