CVE-2006-6403: Mystats

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

mystats.php in MyStats 1.0.8 and earlier allows remote attackers to obtain the installation path via (1) details and (2) by array parameters, probably resulting in a path disclosure in an error message.

Affected products

• Mystats Mystats: up to and including 1.0.8

Published 2006-12-10. Last modified 2026-06-16.