VYPR
← All advisories
Unrated severityNVD Advisory· Published May 21, 2007· Updated Apr 23, 2026

CVE-2007-2780

CVE-2007-2780

Description

PsychoStats 3.0.6b and earlier allows remote attackers to obtain sensitive information via a request for server.php with a missing or invalid newtheme parameter, which reveals a path in an error message.

Affected products

9
  • Psychostats/Psychostats9 versions
    cpe:2.3:a:psychostats:psychostats:*:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:psychostats:psychostats:*:*:*:*:*:*:*:*range: <=3.0.6b
    • cpe:2.3:a:psychostats:psychostats:2.0.1:beta:*:*:*:*:*:*
    • cpe:2.3:a:psychostats:psychostats:2.0:beta:*:*:*:*:*:*
    • cpe:2.3:a:psychostats:psychostats:2.1:beta:*:*:*:*:*:*
    • cpe:2.3:a:psychostats:psychostats:2.2.1:beta:*:*:*:*:*:*
    • cpe:2.3:a:psychostats:psychostats:2.2.2:beta:*:*:*:*:*:*
    • cpe:2.3:a:psychostats:psychostats:2.2.4:beta:*:*:*:*:*:*
    • cpe:2.3:a:psychostats:psychostats:2.2:beta:*:*:*:*:*:*
    • cpe:2.3:a:psychostats:psychostats:2.3:beta:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.