CVE-2008-6772

2009-04-2918:06:00

mitre

www.cve.org

6.7 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.4%

JSON

login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account is created, which allows remote attackers to bypass intended access restrictions by registering a new account with the username of a target user.