Published: 06/06/2008 Updated: 11/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 765

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and previous versions allow remote malicious users to execute arbitrary SQL commands via the id parameter to (1) view.php and (2) edit.php. NOTE: it was later reported that 4.0.x is also affected.

Vulnerable Product	Search on Vulmon	Subscribe to Product
php-address book php-address book 3.1.2
php-address book php-address book 3.1.1
php-address book php-address book 2.1.1
php-address book php-address book 2.1
php-address book php-address book 2.0
php-address book php-address book 3.4.4
php-address book php-address book 3.4.3
php-address book php-address book
php-address book php-address book 3.1.5
php-address book php-address book 2.6
php-address book php-address book 2.4
php-address book php-address book 3.4.8
php-address book php-address book 3.4.7
php-address book php-address book 3.4
php-address book php-address book 3.3.18
php-address book php-address book 3.1
php-address book php-address book 3.0
php-address book php-address book 1.2
php-address book php-address book 1.0
php-address book php-address book 3.4.2
php-address book php-address book 3.4.1
php-address book php-address book 3.1.4
php-address book php-address book 3.1.3
php-address book php-address book 2.3
php-address book php-address book 2.2
php-address book php-address book 3.4.6
php-address book php-address book 3.4.5
php-address book php-address book 3.3.17
php-address book php-address book 3.3.16

*********************************************************************************************** *********************************************************************************************** ** ** ** ** ** [] [] [] [][][][> [] [] [][ ][] [] [][]] [] [> [][][][> [][][][] ** ** ...

============================================================ PHP-Address Book (SQL/XSS) Multiple Remote Vulnerabilities ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| `--------' | O CWH Underground Hacking Team `+---------------------------^----------| ...

Advisory: PHP Address Book 6212 Multiple security vulnerabilities Advisory ID: SSCHADV2012-007 Author: Stefan Schurtz Affected Software: Successfully tested on PHP Address Book 6212 Vendor URL: sourceforgenet/projects/php-addressbook/ Vendor Status: informed ========================== Vulnerability Description =================== ...

CWE-89 http://secunia.com/advisories/30540 http://secunia.com/advisories/35590 http://www.securityfocus.com/bid/35511 http://packetstormsecurity.com/files/129789/PHP-Address-Book-Cross-Site-Scripting-SQL-Injection.html https://exchange.xforce.ibmcloud.com/vulnerabilities/99622 https://exchange.xforce.ibmcloud.com/vulnerabilities/42855 https://www.exploit-db.com/exploits/9023 https://www.exploit-db.com/exploits/5739 http://www.securityfocus.com/archive/1/504595/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/9023/

CVE-2008-2565

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect