Lucene search
HistoryApr 29, 2009 - 6:30 p.m.
CVE-2008-6772
cve-2008-6772
login form
registration form
security vulnerability
access restriction
yourplace
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.4%
login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account is created, which allows remote attackers to bypass intended access restrictions by registering a new account with the username of a target user.
Affected configurations
Node
peterselieyourplaceRange≤1.0.2
ORpeterselieyourplaceMatch1.0
ORpeterselieyourplaceMatch1.0.1
Related
cvelist
cvelist
CVE-2008-6772
2009-04-29 18:06:00
nvd
nvd
CVE-2008-6772
2009-04-29 18:30:00
prion
prion
Design/Logic Flaw
2009-04-29 18:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.4%
Related for CVE-2008-6772