Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

php-address book php-address book vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2008-2565
Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and previous versions allow remote malicious users to execute arbitrary SQL commands via the id parameter to (1) view.php and (2) edit.php. NOTE: it was later reported that 4.0.x is also affected.
Php-address Book Php-address Book 3.1.2Php-address Book Php-address Book 3.1.1Php-address Book Php-address Book 2.1.1Php-address Book Php-address Book 2.1Php-address Book Php-address Book 2.0Php-address Book Php-address Book 3.4.4Php-address Book Php-address Book 3.4.3Php-address Book Php-address BookPhp-address Book Php-address Book 3.1.5Php-address Book Php-address Book 2.6Php-address Book Php-address Book 2.4Php-address Book Php-address Book 3.4.8Php-address Book Php-address Book 3.4.7Php-address Book Php-address Book 3.4Php-address Book Php-address Book 3.3.18Php-address Book Php-address Book 3.1Php-address Book Php-address Book 3.0Php-address Book Php-address Book 1.2Php-address Book Php-address Book 1.0Php-address Book Php-address Book 3.4.2Php-address Book Php-address Book 3.4.1Php-address Book Php-address Book 3.1.4
4.3
CVSSv2
CVE-2012-1912
Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the from parameter. NOTE: the index.php vector is already covered by CVE-2008-2566.
Chatelao Php Address Book 6.1Chatelao Php Address Book 6.2Chatelao Php Address Book 6.2.7Chatelao Php Address Book 6.2.9Chatelao Php Address Book 5.8.1Chatelao Php Address Book 5.7.5Chatelao Php Address Book 5.4.4Chatelao Php Address Book 5.4.3Chatelao Php Address Book 5.5Chatelao Php Address Book 5.4.2Chatelao Php Address Book 5.4.1Chatelao Php Address Book 4.0.2Chatelao Php Address Book 3.2.6Chatelao Php Address Book 3.1.5Chatelao Php Address Book 3.1.6Chatelao Php Address Book 3.3.8Chatelao Php Address Book 3.3.7Chatelao Php Address Book 3.3Chatelao Php Address Book 3.2.14Chatelao Php Address Book 3.4.8Chatelao Php Address Book 3.4.5Chatelao Php Address Book 3.4.4
7.5
CVSSv2
CVE-2012-1911
Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) to_group parameter to group.php or (2) id parameter to vcard.php. NOTE: the edit.php vector is already covered by CVE...
Chatelao Php Address Book 6.2.9Chatelao Php Address Book 6.2.7Chatelao Php Address Book 6.2Chatelao Php Address Book 6.1.4Chatelao Php Address Book 5.7.3Chatelao Php Address Book 5.8.1Chatelao Php Address Book 5.7.5Chatelao Php Address Book 5.4.4Chatelao Php Address Book 5.4.3Chatelao Php Address Book 5.0Chatelao Php Address Book 5.4.2Chatelao Php Address Book 4.0.2Chatelao Php Address Book 3.2.6Chatelao Php Address Book 3.2.13Chatelao Php Address Book 3.1.5Chatelao Php Address Book 3.2.5Chatelao Php Address Book 3.3.8Chatelao Php Address Book 3.3Chatelao Php Address Book 3.2.14Chatelao Php Address Book 3.4.7Chatelao Php Address Book 3.4.8Chatelao Php Address Book 3.4.3
4.3
CVSSv2
CVE-2012-2903
Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) PATH_INFO to group.php, or the (2) target_language or (3) target_flag parameter to translate.php.
Chatelao Php Address Book 5.8.1Chatelao Php Address Book 5.7.5Chatelao Php Address Book 5.5Chatelao Php Address Book 5.4.9Chatelao Php Address Book 5.4.2Chatelao Php Address Book 5.4.1Chatelao Php Address Book 4.1.3Chatelao Php Address Book 4.1.1Chatelao Php Address Book 3.4.4Chatelao Php Address Book 3.4.3Chatelao Php Address Book 3.3.15Chatelao Php Address Book 3.3.14Chatelao Php Address Book 3.3.5Chatelao Php Address Book 5.7.4Chatelao Php Address Book 5.7.3Chatelao Php Address Book 3.4.9Chatelao Php Address Book 5.4.7Chatelao Php Address Book 5.4Chatelao Php Address Book 5.3Chatelao Php Address Book 4.0.2Chatelao Php Address Book 4.0Chatelao Php Address Book 3.4.2
4.3
CVSSv2
CVE-2008-2566
Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 3.1.5 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the group parameter to (1) index.php or (2) the default URI.
Php-address Book Php-address Book
6.8
CVSSv2
CVE-2009-2608
Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote malicious users to execute arbitrary SQL commands via the (1) id parameter to delete.php or (2) alphabet parameter to index.php. NOTE: the edit.php and view.php vectors are already covered by CVE-2008-2...
Chatelao Php Address Book 4.0.1Chatelao Php Address Book 4.0.2
7.5
CVSSv2
CVE-2013-0135
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote malicious users to execute arbitrary SQL commands via the id parameter to (1) addressbook/register/delete_user.php, (2) addressbook/register/edit_user.php, or (3) addressbook/register/edit_user_save.php...
Chatelao Php Address Book 8.2.5
7.5
CVSSv2
CVE-2013-1748
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote malicious users to execute arbitrary SQL commands via unspecified parameters to (1) edit.php or (2) import.php. NOTE: the view.php id vector is already covered by CVE-2008-2565.1 and the edit.php id vec...
Chatelao Php Address Book 8.2.5
7.5
CVSSv2
CVE-2013-2778
Cross-site request forgery (CSRF) vulnerability in addressbook/register/delete_user.php in PHP Address Book 8.2.5 allows remote malicious users to hijack the authentication of administrators for requests that delete accounts, a different vulnerability than CVE-2013-0135.1.
Chatelao Php Address Book 8.2.5
4.3
CVSSv2
CVE-2013-1749
Cross-site scripting (XSS) vulnerability in edit.php in PHP Address Book 8.2.5 allows user-assisted remote malicious users to inject arbitrary web script or HTML via the Address field.
Chatelao Php Address Book 8.2.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook