CVEvulnerability
CVE-2013-7289
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in register.php in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, (3) email, or (4) username parameter.
Affected configurations
• aphpkb aphpkb (<= 0.95.7)
• aphpkb aphpkb 0.1
• aphpkb aphpkb 0.2
• aphpkb aphpkb 0.3
• aphpkb aphpkb 0.4
• aphpkb aphpkb 0.5
• aphpkb aphpkb 0.6
• aphpkb aphpkb 0.9
• aphpkb aphpkb 0.21
• aphpkb aphpkb 0.31
• aphpkb aphpkb 0.33
• aphpkb aphpkb 0.35
• aphpkb aphpkb 0.38
• aphpkb aphpkb 0.39
• aphpkb aphpkb 0.41
• aphpkb aphpkb 0.42
• aphpkb aphpkb 0.43
• aphpkb aphpkb 0.44
• aphpkb aphpkb 0.45
• aphpkb aphpkb 0.51
• aphpkb aphpkb 0.52
• aphpkb aphpkb 0.53
• aphpkb aphpkb 0.54
• aphpkb aphpkb 0.55
• aphpkb aphpkb 0.56
• aphpkb aphpkb 0.57
• aphpkb aphpkb 0.58
• aphpkb aphpkb 0.59
• aphpkb aphpkb 0.61
• aphpkb aphpkb 0.62
• aphpkb aphpkb 0.63
• aphpkb aphpkb 0.64
• aphpkb aphpkb 0.65
• aphpkb aphpkb 0.66
• aphpkb aphpkb 0.67
• aphpkb aphpkb 0.70
• aphpkb aphpkb 0.71
• aphpkb aphpkb 0.72
• aphpkb aphpkb 0.73
• aphpkb aphpkb 0.74
• aphpkb aphpkb 0.75
• aphpkb aphpkb 0.76
• aphpkb aphpkb 0.77
• aphpkb aphpkb 0.78
• aphpkb aphpkb 0.79
• aphpkb aphpkb 0.80
• aphpkb aphpkb 0.81
• aphpkb aphpkb 0.82
• aphpkb aphpkb 0.83
• aphpkb aphpkb 0.84
• aphpkb aphpkb 0.85
• aphpkb aphpkb 0.86
• aphpkb aphpkb 0.87
• aphpkb aphpkb 0.88
• aphpkb aphpkb 0.88.5
• aphpkb aphpkb 0.88.6
• aphpkb aphpkb 0.88.7
• aphpkb aphpkb 0.88.8
• aphpkb aphpkb 0.89
• aphpkb aphpkb 0.91
… and 37 more
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://aphpkb.blogspot.dk/2013/12/release-of-aphpkb-0958.html Patch, Vendor Advisory
- http://osvdb.org/101466 osvdb.org
- http://secunia.com/advisories/56228 Vendor Advisory
- http://sourceforge.net/p/aphpkb/code/91 sourceforge.net
- http://aphpkb.blogspot.dk/2013/12/release-of-aphpkb-0958.html Patch, Vendor Advisory
- http://osvdb.org/101466 osvdb.org
- http://secunia.com/advisories/56228 Vendor Advisory
- http://sourceforge.net/p/aphpkb/code/91 sourceforge.net