Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xm4j-4h3f-73vh

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account is created, which allows remote attackers to bypass intended access restrictions by registering a new account with the username of a target user.

login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account is created, which allows remote attackers to bypass intended access restrictions by registering a new account with the username of a target user.

EPSS

Процентиль: 79%
0.01233
Низкий

Дефекты

CWE-20

Связанные уязвимости

nvd
почти 17 лет назад

login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account is created, which allows remote attackers to bypass intended access restrictions by registering a new account with the username of a target user.

EPSS

Процентиль: 79%
0.01233
Низкий

Дефекты

CWE-20