Cross site scripting

2014-01-1016:47:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in register.php in Andy’s PHP Knowledgebase (Aphpkb) before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, (3) email, or (4) username parameter.

CPENameOperatorVersion
aphpkbeq0.93.9
aphpkbeq0.86
aphpkbeq0.92.1
aphpkbeq0.45
aphpkbeq0.94.3
aphpkbeq0.92.3
aphpkbeq0.87
aphpkbeq0.361
aphpkbeq0.3
aphpkbeq0.93.8

Name	Operator	Version
aphpkb	eq	0.93.9
aphpkb	eq	0.86
aphpkb	eq	0.92.1
aphpkb	eq	0.45
aphpkb	eq	0.94.3
aphpkb	eq	0.92.3
aphpkb	eq	0.87
aphpkb	eq	0.361
aphpkb	eq	0.3
aphpkb	eq	0.93.8

Rows per page:

1-10 of 971

References

aphpkb.blogspot.dk/2013/12/release-of-aphpkb-0958.html

osvdb.org/101466

secunia.com/advisories/56228

sourceforge.net/p/aphpkb/code/91