CVEvulnerability

CVE-2013-7289

4.3 MEDIUM Published 2014-01-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-01-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in register.php in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, (3) email, or (4) username parameter.

Affected configurations

• aphpkb aphpkb (<= 0.95.7) • aphpkb aphpkb 0.1 • aphpkb aphpkb 0.2 • aphpkb aphpkb 0.3 • aphpkb aphpkb 0.4 • aphpkb aphpkb 0.5 • aphpkb aphpkb 0.6 • aphpkb aphpkb 0.9 • aphpkb aphpkb 0.21 • aphpkb aphpkb 0.31 • aphpkb aphpkb 0.33 • aphpkb aphpkb 0.35 • aphpkb aphpkb 0.38 • aphpkb aphpkb 0.39 • aphpkb aphpkb 0.41 • aphpkb aphpkb 0.42 • aphpkb aphpkb 0.43 • aphpkb aphpkb 0.44 • aphpkb aphpkb 0.45 • aphpkb aphpkb 0.51 • aphpkb aphpkb 0.52 • aphpkb aphpkb 0.53 • aphpkb aphpkb 0.54 • aphpkb aphpkb 0.55 • aphpkb aphpkb 0.56 • aphpkb aphpkb 0.57 • aphpkb aphpkb 0.58 • aphpkb aphpkb 0.59 • aphpkb aphpkb 0.61 • aphpkb aphpkb 0.62 • aphpkb aphpkb 0.63 • aphpkb aphpkb 0.64 • aphpkb aphpkb 0.65 • aphpkb aphpkb 0.66 • aphpkb aphpkb 0.67 • aphpkb aphpkb 0.70 • aphpkb aphpkb 0.71 • aphpkb aphpkb 0.72 • aphpkb aphpkb 0.73 • aphpkb aphpkb 0.74 • aphpkb aphpkb 0.75 • aphpkb aphpkb 0.76 • aphpkb aphpkb 0.77 • aphpkb aphpkb 0.78 • aphpkb aphpkb 0.79 • aphpkb aphpkb 0.80 • aphpkb aphpkb 0.81 • aphpkb aphpkb 0.82 • aphpkb aphpkb 0.83 • aphpkb aphpkb 0.84 • aphpkb aphpkb 0.85 • aphpkb aphpkb 0.86 • aphpkb aphpkb 0.87 • aphpkb aphpkb 0.88 • aphpkb aphpkb 0.88.5 • aphpkb aphpkb 0.88.6 • aphpkb aphpkb 0.88.7 • aphpkb aphpkb 0.88.8 • aphpkb aphpkb 0.89 • aphpkb aphpkb 0.91 … and 37 more

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References