CVE:CVE-2007-2914
CNNVD:CNNVD-200705-525
PsychoStats 中存在多个跨站脚本攻击漏洞。远程攻击者可以借助提交到(1)awards.php,(2)login.php,(3)register.php,(4)weapons.php和可能其他文件的PATH_INFO，注入任意的web脚本或HTML。
solution:Upgrade psychostats psychostats to a higher version than 3.0.6b,and avoid the version 3.0.6b