Chatelao

Php Address Book

9 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.2

CVE-2020-37083

  • EPSS 0.06%
  • Veröffentlicht 03.02.2026 22:16:24
  • Zuletzt bearbeitet 04.02.2026 16:33:44

PHP AddressBook 9.0.0.1 contains a time-based blind SQL injection vulnerability that allows remote attackers to manipulate database queries through the 'id' parameter. Attackers can inject crafted SQL statements with time delays to extract informatio...

7.5

CVE-2013-1748

Exploit
  • EPSS 0.17%
  • Veröffentlicht 18.04.2013 11:33:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) edit.php or (2) import.php. NOTE: the view.php id vector is already covered by CVE-2008-2565....

4.3

CVE-2013-1749

Exploit
  • EPSS 0.23%
  • Veröffentlicht 18.04.2013 11:33:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in edit.php in PHP Address Book 8.2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via the Address field.

7.5

CVE-2013-0135

Exploit
  • EPSS 3.46%
  • Veröffentlicht 09.04.2013 03:34:53
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) addressbook/register/delete_user.php, (2) addressbook/register/edit_user.php, or (3) addressbook/reg...

7.5

CVE-2013-2778

  • EPSS 0.13%
  • Veröffentlicht 09.04.2013 03:34:53
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site request forgery (CSRF) vulnerability in addressbook/register/delete_user.php in PHP Address Book 8.2.5 allows remote attackers to hijack the authentication of administrators for requests that delete accounts, a different vulnerability than...

7.5

CVE-2012-1911

Exploit
  • EPSS 1.33%
  • Veröffentlicht 09.09.2012 21:55:06
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) to_group parameter to group.php or (2) id parameter to vcard.php. NOTE: the edit.php vector is already...

4.3

CVE-2012-1912

Exploit
  • EPSS 8.91%
  • Veröffentlicht 09.09.2012 21:55:06
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter. NOTE: the index.php vector is already covered by CVE-2008-2566.

4.3

CVE-2012-2903

Exploit
  • EPSS 1.5%
  • Veröffentlicht 21.05.2012 18:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to group.php, or the (2) target_language or (3) target_flag parameter to trans...

6.8

CVE-2009-2608

Exploit
  • EPSS 0.32%
  • Veröffentlicht 27.07.2009 18:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to delete.php or (2) alphabet parameter to index.php. NOTE: the edit.php and view.php vectors are alre...