CVE-2008-6772

EPSS 2.3%

login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account is created, which allows remote attackers to bypass intended access restrictions by registering a new account with the username of a target user.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/7545unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/33272 https://exchange.xforce.ibmcloud.com/vulnerabilities/47564 https://www.exploit-db.com/exploits/7545 http://www.securityfocus.com/bid/32971