CVE-2008-6774 - CVE House
Back to Database
Status published Medium CVE-2008-6774

internettoolbar/edit.php in YourPlace 1.0.2 and earlier does not end execution...

Vulnerability Description

internettoolbar/edit.php in YourPlace 1.0.2 and earlier does not end execution when an invalid username is detected, which allows remote attackers to bypass intended restrictions and edit toolbar settings via an invalid username. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-6774

Credits & Attribution

No credits recorded in the NVD database.

References

More from peterselie

View All →
CVE-2008-6773
Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and...
Medium 6.5
CVE-2008-6772
login/register_form.php in YourPlace 1.0.2 and earlier does not check that...
High 7.5
CVE-2008-6771
YourPlace 1.0.2 and earlier allows remote attackers to obtain sensitive...
Medium 5
CVE-2008-6770
YourPlace 1.0.2 and earlier stores sensitive information under the web...
Medium 5
CVE-2008-6769
Unrestricted file upload vulnerability in upload.php in YourPlace 1.0.2 and...
Medium 6

Affected Vendor

Affected Software

yourplace
Vulnerable Versions:
0, 1.0, 1.0.1

Timeline

Official Publish: April 29th, 2009
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.