CVEvulnerability
CVE-2008-6422
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-03-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in PsychoStats 2.3, 2.3.1, and 2.3.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) weapon.php and (2) map.php.
Affected configurations
• psychostats psychostats 2.3
• psychostats psychostats 2.3.1
• psychostats psychostats 2.3.3
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/45868 osvdb.org
- http://osvdb.org/45869 osvdb.org
- http://secunia.com/advisories/30464 Vendor Advisory
- http://www.securityfocus.com/bid/29449 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42770 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5699 www.exploit-db.com
- http://osvdb.org/45868 osvdb.org
- http://osvdb.org/45869 osvdb.org
- http://secunia.com/advisories/30464 Vendor Advisory
- http://www.securityfocus.com/bid/29449 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42770 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5699 www.exploit-db.com