CVE-2008-6772: login/register_form.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a...

Security readout for executives and security teams

YourPlace registration could let someone create a new account using an existing user’s username. That can undermine account identity and access controls because the application may treat the new account as the target user. The source bundle does not provide a CVSS score or confirmed active exploitation. Exposure is likely limited to organizations still running YourPlace 1.0.2 or earlier with public or unauthenticated self-registration enabled. The product appears old, so current exposure depends heavily on legacy deployments. Treat as a legacy access-control risk. Prioritize quickly if YourPlace remains exposed to the internet or protects sensitive user data; otherwise handle through legacy application retirement or hardening. Mitigation focus: Inventory for YourPlace 1.0.2 or earlier, especially internet-facing instances.; Check vendor or archived advisory guidance for any fixed release or official patch.; Disable public self-registration until duplicate username prevention is confirmed..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.