PT-2023-9893 · Unknown · Stars Alliance Psychostats

·

CVE-2010-10010

·

Published

2023-06-01

·

Updated

2024-05-17

CVSS v2.0

4.0

Medium

VectorAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Stars Alliance PsychoStats versions up to 3.2.2a
Description A vulnerability has been found in Stars Alliance PsychoStats, affecting an unknown part of the file "upload/admin/login.php". The manipulation of the ref argument leads to cross-site scripting. It is possible to initiate the attack remotely.
Recommendations For Stars Alliance PsychoStats versions up to 3.2.2a, upgrade to version 3.2.2b to address this issue. As a temporary workaround, consider restricting access to the "upload/admin/login.php" file until the upgrade is applied. Additionally, avoid using the ref argument in the affected file until the issue is resolved.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2010-10010

Affected Products

Stars Alliance Psychostats