CVE-2008-6772

login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account is created, which allows remote…

published April 29, 2009

CVSS
—
EPSS
2%
Percentile
83.3
In the wild
Unconfirmed
What it is

login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account is created, which allows remote attackers to bypass intended access restrictions by registering a new account with the username of a target user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02324 · 83.3th percentile
Published
2009-04-29T18:06Z
EPSS history
Timeline
  • 29 APR 18:06Z
    login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account is created, which allows remote…
    cvelistv5