CVE-2019-8290
N/A
N/A
Summary
Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to sent_register.php allowing special characters to be included and an XSS payload to be injected.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| abcprintf | Online Store | unspecified <= 1.0 | affected |
Weaknesses
- User input not sanitized in sent_register.php.
ADP Enrichment
CVE Program Container
Additional References
- http://www.vapidlabs.com/advisory.php?v=210
- https://www.abcprintf.com/view_download.php?id=17
- http://www.openwall.com/lists/oss-security/2019/10/02/1
References
- http://www.vapidlabs.com/advisory.php?v=210
- https://www.abcprintf.com/view_download.php?id=17
- http://www.openwall.com/lists/oss-security/2019/10/02/1
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.