Back to Database
Status published
Medium
CVE-2019-8290
Vulnerability in Online Store v1.0, The registration form requirements for...
Vulnerability Description
Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to sent_register.php allowing special characters to be included and an XSS payload to be injected.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-8290
Credits & Attribution
No credits recorded in the NVD database.
References
More from abcprintf
View All →CVE-2019-8292
Online Store System v1.0 delete_product.php doesn't check to see if...
Medium
5.3
CVE-2019-8291
Online Store System v1.0 delete_file.php doesn't check to see if...
High
7.5
CVE-2019-8289
Vulnerability in Online Store v1.0, stored XSS in admin/user_view.php adidas_member_email...
Medium
5.4
CVE-2019-8288
Vulnerability in Online Store v1.0, Stored XSS in user_view.php where...
Medium
5.4
Affected Vendor
abcprintf
View all reports →Affected Software
Online Store
Vulnerable Versions:
unspecified
Timeline
Official Publish:
October 1st, 2019
Last Modified:
August 4th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.