CVE-2004-1417 Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter.
MediumCVSS 4.3
EPSS 1.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| psychostats | <= 2.2.4 | No fix listed |
| psychostats | = 2.0-beta | No fix listed |
| psychostats | = 2.0.1-beta | No fix listed |
| psychostats | = 2.1-beta | No fix listed |
| psychostats | = 2.2-beta | No fix listed |
| psychostats | = 2.2.1-beta | No fix listed |
| psychostats | = 2.2.2-beta | No fix listed |
References
- 20041223 Cross Site Scripting In PsychoStats 2.2.4 Beta && Earlier mailing-list
- 13619 patch third-party-advisory vendor-advisory
- www.gulftech.org exploit patch
- www.psychostats.com patch url-repurposed
- 12089 exploit patch vdb-entry
- psychostats-login-xss(18651) vdb-entry