Multiple SQL injection vulnerabilities in PsychoStats 2.3, 2.3.1, and 2.3.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) weapon.php and (2) map.php.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2009-03-06 10:30
Updated : 2017-09-28 18:33
NVD link : CVE-2008-6422
Mitre link : CVE-2008-6422
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
psychostats
- psychostats