Skip to content
OpenAdvisories
Unscored CVE-2019-8290 EUVD-2019-17688GHSA-fmf6-hm95-5qfg

Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to s…

Published Oct 1, 2019 · Updated Aug 4, 2024 · Assigned by larry_cashdollar

Description

Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to sent_register.php allowing special characters to be included and an XSS payload to be injected.

Affected products

VendorProductAffectedFixed
abcprintf Online Store unspecified – ≤ 1.0 —

References