Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
book vulnerabilities and exploits
(subscribe to this query)
3.5
CVSSv2
CVE-2021-24538
The Current Book WordPress plugin up to and including 1.0.1 does not sanitize user input when an authenticated user adds Author or Book Title, then does not escape these values when outputting to the browser leading to an Authenticated Stored XSS Cross-Site Scripting issue.
Current Book Project Current Book
6.8
CVSSv2
CVE-2006-6764
PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book (KISGB), when executing PHP through CGI, allows remote malicious users to execute arbitrary PHP code via a URL in the default_path_to_themes parameter.
Keep It Simple Guest Book Keep It Simple Guest Book 5.0
Keep It Simple Guest Book Keep It Simple Guest Book
1 EDB exploit
4.3
CVSSv2
CVE-2008-2566
Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 3.1.5 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the group parameter to (1) index.php or (2) the default URI.
Php-address Book Php-address Book
2 EDB exploits
7.5
CVSSv2
CVE-2012-6652
Directory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book plugin for WordPress (wppageflip) allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the pageflipbook_language parameter.
Page Flip Book Project Page Flip Book -
6.8
CVSSv2
CVE-2006-4576
Cross-site scripting (XSS) vulnerability in The Address Book 1.04e allows remote malicious users to inject arbitrary web script or HTML by uploading the HTML file with a GIF or JPG extension, which is rendered by Internet Explorer.
The Address Book The Address Book 1.04e
5
CVSSv2
CVE-2006-4579
Directory traversal vulnerability in users.php in The Address Book 1.04e allows remote malicious users to include arbitrary files via a .. (dot dot) in the language parameter.
The Address Book The Address Book 1.04e
5
CVSSv2
CVE-2006-4581
Unrestricted file upload vulnerability in The Address Book 1.04e validates the Content-Type header but not the file extension, which allows remote malicious users to upload arbitrary PHP scripts.
The Address Book The Address Book 1.04e
5
CVSSv2
CVE-2006-4582
Cross-site request forgery (CSRF) vulnerability in The Address Book 1.04e allows remote malicious users to perform unauthorized actions as other users via unspecified vectors, as demonstrated by deleting arbitrary users via the id parameter in a deleteuser action in users.php.
The Address Book The Address Book 1.04e
6.8
CVSSv2
CVE-2007-1059
PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote malicious users to execute arbitrary PHP code via a URL in the gbpfad parameter. NOTE: some sources mention "Ultimate Fun Board," but this appears to be an error.
Ultimate Fun Book Ultimate Fun Book 1.02
1 EDB exploit
7.5
CVSSv2
CVE-2006-4575
Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote malicious users to execute arbitrary SQL commands via the (1) lastname, (2) firstname, (3) passwordOld, (4) passwordNew, (5) id, (6) language, (7) defaultLetter, (8) newuserPass, (9) newuserType, (10) n...
The Address Book The Address Book 1.04e
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injection
SSRF
buffer overflow
CVE-2023-28952
CVE-2023-41822
CVE-2024-27956
CVE-2023-7028
CVE-2024-34447
CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »