CVE-2013-7289: Multiple cross-site scripting (XSS) vulnerabilities in register.php in Andy's PHP Knowledgebase (Aphpkb) be...

Security readout for executives and security teams

CVE-2013-7289 is a cross-site scripting issue in Andy's PHP Knowledgebase registration flow. On affected versions before 0.95.8, attacker-supplied registration fields could be rendered as script or HTML. Business impact depends on whether Aphpkb is still deployed and publicly reachable. Exposure is most likely on legacy public Aphpkb installations that allow unauthenticated registration. Organizations without Aphpkb, or with Aphpkb upgraded to 0.95.8 or later, are unlikely to be affected based on the supplied sources. Treat this as a targeted legacy web-application cleanup item. Prioritize quickly if Aphpkb is internet-facing or used by privileged staff; otherwise handle through normal vulnerability management. Mitigation focus: Inventory any Andy's PHP Knowledgebase deployments and confirm their versions.; Upgrade affected Aphpkb installations to 0.95.8 or later where applicable.; Review the 0.95.8 release and SourceForge change reference for vendor-specific fix details..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.