CVE-2008-6422

CVE-2008-6422 concerns SQL injection vulnerabilities in PsychoStats versions 2.3, 2.3.1, and 2.3.3. The flaws allow remote attackers to execute arbitrary SQL commands by manipulating the id parameter passed to weapon.php and map.php. The underlying issue is an unsafely constructed SQL query expos...

PsychoStats 2.3 - Server.php Full Path Disclosure

PsychoStats 2.3 - Server.php Full Path Disclosure source: https://www.securityfocus.com/bid/24039/info PsychoStats is prone to a path-disclosure issue when invalid data is submitted. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks...