TUCoPS :: HP Unsorted P

TUCoPS :: HP Unsorted P :: tb10994.htm
PsychoStats v3.0.6b Multiple Cross-Site Scripting Vulnerabilities

RedLevel Advisory #017 - PsychoStats v3.0.6b Multiple Cross-Site Scripting Vulnerabilities RedLevel Advisory #017 - PsychoStats v3.0.6b Multiple Cross-Site Scripting Vulnerabilities


PsychoStats v3.0.6b Multiple Cross-Site Scripting Vulnerabilities

PsychoStats contains multiple cross-site scripting vulnerabilities that may be exploited through the URI.

Vulnerable Files: awards.php, login.php, register.php, weapons.php - other files may also be susceptible to this vulnerability.
Vulnerability:  
Vulnerable: PsychoStats v3.0.6b (other versions may also be vulnerable)
Google d0rk: "Powered by PsychoStats v3.0.6b"

John Martinelli
john@martinelli.com 

RedLevel Security
RedLevel.org

May 19th, 2007