CVEvulnerability
CVE-2008-6774
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-04-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
internettoolbar/edit.php in YourPlace 1.0.2 and earlier does not end execution when an invalid username is detected, which allows remote attackers to bypass intended restrictions and edit toolbar settings via an invalid username. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected configurations
• peterselie yourplace (<= 1.0.2)
• peterselie yourplace 1.0
• peterselie yourplace 1.0.1
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/33272 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47566 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/33272 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47566 exchange.xforce.ibmcloud.com