Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

address book project address book vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2014-125058
A vulnerability was found in LearnMeSomeCodes project3 and classified as critical. This issue affects the function search_first_name of the file search.rb. The manipulation leads to sql injection. The patch is named d3efa17ae9f6b2fc25a6bbcf165cefed17c7035e. It is recommended to a...
Address Book Project Address Book
6.1
CVSSv3
CVE-2023-4492
Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters (firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate and workzip) of the /addrbook.ghp file, allowing an malicious user to inject a JavaScript payl...
Easy Address Book Web Server Project Easy Address Book Web Server 1.6
9.8
CVSSv3
CVE-2023-4491
Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version. The exploitation of this vulnerability could allow an malicious user to send a very long username string to /searchbook.ghp, asking for the name via a POST request, resulting in arbitrary code execution on...
Easy Address Book Web Server Project Easy Address Book Web Server 1.6
5.4
CVSSv3
CVE-2023-4493
Stored Cross-Site Scripting in Easy Address Book Web Server 1.6 version, through the users_admin.ghp file that affects multiple parameters such as (firstname, homephone, lastname, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate, workzip). This vulne...
Easy Address Book Web Server Project Easy Address Book Web Server 1.6
6.1
CVSSv3
CVE-2023-4495
Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /registresult.htm (POST method), in the Resume parameter. The XSS is loaded from /register.ghp.
Easy Chat Server Project Easy Chat Server
6.1
CVSSv3
CVE-2023-4496
Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /body2.ghp (POST method), in the mtowho parameter.
Easy Chat Server Project Easy Chat Server
6.1
CVSSv3
CVE-2023-4497
Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /registresult.htm (POST method), in the Icon parameter. The XSS is loaded from /users.ghp.
Easy Chat Server Project Easy Chat Server
9.8
CVSSv3
CVE-2023-4494
Stack-based buffer overflow vulnerability in Easy Chat Server 3.1 version. An attacker could send an excessively long username string to the register.ghp file asking for the name via a GET request resulting in arbitrary code execution on the remote machine.
Easy Chat Server Project Easy Chat Server 3.1
6.1
CVSSv3
CVE-2017-18522
The eelv-newsletter plugin prior to 4.6.1 for WordPress has XSS in the address book.
Eelv Newsletter Project Eelv Newsletter
8.8
CVSSv3
CVE-2017-18523
The eelv-newsletter plugin prior to 4.6.1 for WordPress has CSRF in the address book.
Eelv Newsletter Project Eelv Newsletter
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
spoofCVE-2024-34928CVE-2024-5291deserializationCVE-2024-4471CVE-2024-4956CVE-2024-32002CVE-2024-5227unspecified
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook