CVE-2008-6773: Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows...

Security readout for executives and security teams

YourPlace 1.0.2 and earlier can let a logged-in remote user turn toolbar favorite fields into server-side PHP code. If a legacy instance is still running, compromise could move from an application account to execution on the web server. The bundle does not name a patch or prove active exploitation. Exposure is likely limited to legacy YourPlace deployments at version 1.0.2 or earlier, especially if user/internettoolbar/edit.php is reachable by authenticated users. The provided affected metadata is incomplete, so inventory verification is essential. Treat as high priority only if YourPlace is present. The business risk is server-side code execution from an authenticated account, but the product appears old and exposure may be uncommon. Mitigation focus: Identify and retire unsupported YourPlace installations where possible.; Check vendor or advisory guidance for any fixed release or official workaround.; Restrict authenticated access to the internettoolbar feature until remediated..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.