Description
Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter.
Exploits (1)
References (6)
Core 6
Core References
Exploit, Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/12089
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/13619/
Patch, URL Repurposed x_refsource_misc
http://www.psychostats.com/forums/viewtopic.php?t=11022
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/18651
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=110383119525592&w=2
Exploit, Patch x_refsource_misc
http://www.gulftech.org/?node=research&article_id=00057-12222004
Scores
EPSS
0.0089
EPSS Percentile
75.5%
Details
CWE
CWE-79
Status
published
Products (7)
psychostats/psychostats
2.0 beta
psychostats/psychostats
2.0.1 beta
psychostats/psychostats
2.1 beta
psychostats/psychostats
2.2 beta
psychostats/psychostats
2.2.1 beta
psychostats/psychostats
2.2.2 beta
psychostats/psychostats
< 2.2.4
Published
Dec 31, 2004
Tracked Since
Feb 18, 2026