CVE-2008-6772

no score yetEPSS 2.3%

login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account is created, which allows remote attackers to bypass intended access restrictions by registering a new account with the username of a target user.

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2009-04-29
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

peterselie:yourplace

References

http://secunia.com/advisories/33272
http://www.securityfocus.com/bid/32971
https://exchange.xforce.ibmcloud.com/vulnerabilities/47564
https://www.exploit-db.com/exploits/7545
http://secunia.com/advisories/33272

Check your stack JSON