Back to Database
Status published
Medium
CVE-2013-7289
Multiple cross-site scripting (XSS) vulnerabilities in register.php in Andy's PHP...
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in register.php in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, (3) email, or (4) username parameter.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-7289
Credits & Attribution
No credits recorded in the NVD database.
References
More from aphpkb
View All →CVE-2013-7277
Multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (Aphpkb)...
Medium
4.3
CVE-2011-1556
SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase (Aphpkb)...
Medium
6.8
CVE-2011-1555
SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase (Aphpkb)...
Medium
6.8
CVE-2011-1546
Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before...
High
7.5
CVE-2008-6513
Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase...
Medium
6.8
Affected Vendor
aphpkb
View all reports →Affected Software
aphpkb
Vulnerable Versions:
0, 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.9, 0.21, 0.31, 0.33, 0.35, 0.38, 0.39, 0.41, 0.42, 0.43, 0.44, 0.45, 0.51, 0.52, 0.53, 0.54, 0.55, 0.56, 0.57, 0.58, 0.59, 0.61, 0.62, 0.63, 0.64, 0.65, 0.66, 0.67, 0.70, 0.71, 0.72, 0.73, 0.74, 0.75, 0.76, 0.77, 0.78, 0.79, 0.80, 0.81, 0.82, 0.83, 0.84, 0.85, 0.86, 0.87, 0.88, 0.88.5, 0.88.6, 0.88.7, 0.88.8, 0.89, 0.91, 0.92, 0.92.1, 0.92.2, 0.92.3, 0.92.4, 0.92.5, 0.92.6, 0.92.7, 0.92.8, 0.92.9, 0.93.1, 0.93.2, 0.93.3, 0.93.4, 0.93.5, 0.93.6, 0.93.7, 0.93.8, 0.93.9, 0.94.1, 0.94.2, 0.94.3, 0.94.4, 0.94.5, 0.94.6, 0.94.7, 0.94.8, 0.94.9, 0.95, 0.95.1, 0.95.2, 0.95.3, 0.95.4, 0.95.5, 0.95.6, 0.361, 0.371
Timeline
Official Publish:
January 10th, 2014
Last Modified:
September 16th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.