medium4.3Public exploit code
CVE-2004-1417
Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to inject arbitrary web script or HTML via …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PsychoStats < 2.2.4 Beta - Cross Site Scripting2014-12-22 · local · windows
Impact
Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Psychostats | Psychostats | through 2.2.4 Versions 2.0, 2.0.1, 2.1, 2.2, 2.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110383119525592&w=2
- http://secunia.com/advisories/13619/
- http://www.gulftech.org/?node=research&article_id=00057-12222004
- http://www.psychostats.com/forums/viewtopic.php?t=11022
- http://www.securityfocus.com/bid/12089
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18651
- http://marc.info/?l=bugtraq&m=110383119525592&w=2
- http://secunia.com/advisories/13619/
- http://www.gulftech.org/?node=research&article_id=00057-12222004
- http://www.psychostats.com/forums/viewtopic.php?t=11022
- http://www.securityfocus.com/bid/12089
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18651