CVE-2006-6781: Hlstats

Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days.

HLstats 1.20 through 1.34 allows remote attackers to obtain sensitive information via playinfo mode, with certain values of the player and playerdata[lastName][] parameters, which reveals the path in an error message.

Affected products

• Hlstats Hlstats: version 1.20 only; version 1.34 only

Published 2006-12-28. Last modified 2026-06-16.