CVE-2007-1291

Multiple cross-site scripting (XSS) vulnerabilities in Tyger Bug Tracking System (TygerBT) 1.1.3 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) Login.php and (2) Register.php.

• http://secunia.com/advisories/24385Vendor Advisory
• http://securityreason.com/securityalert/2356
• http://www.securityfocus.com/archive/1/461801/100/0/threaded
• http://www.securityfocus.com/bid/22799Exploit, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/0822
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32792
• http://secunia.com/advisories/24385Vendor Advisory
• http://securityreason.com/securityalert/2356
• http://www.securityfocus.com/archive/1/461801/100/0/threaded
• http://www.securityfocus.com/bid/22799Exploit, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/0822
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32792

Published

Mar 7, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1285The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.…7.5
• CVE-2007-1286Integer overflow in PHP 4.4.4 and earlier allows remote cont…
• CVE-2007-1287A regression error in the phpinfo function in PHP 4.4.3 to 4…
• CVE-2007-1288Multiple PHP remote file inclusion vulnerabilities in Webmob…
• CVE-2007-1289SQL injection vulnerability in ViewBugs.php in Tyger Bug Tra…
• CVE-2007-1290SQL injection vulnerability in ViewReport.php in Tyger Bug T…
• CVE-2007-1292SQL injection vulnerability in inlinemod.php in Jelsoft vBul…
• CVE-2007-1293SQL injection vulnerability in Rigter Portal System (RPS) 6.…
• CVE-2007-1294A certain ActiveX control in the DivXBrowserPlugin (npdivx32…
• CVE-2007-1295SQL injection vulnerability in topic_title.php in AJ Forum 1…
• CVE-2007-1296SQL injection vulnerability in postingdetails.php in AJ Clas…
• CVE-2007-1297SQL injection vulnerability in view_profile.php in AJDating …