Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote malicious users to execute arbitrary SQL commands via the (1) id parameter to delete.php or (2) alphabet parameter to index.php. NOTE: the edit.php and view.php vectors are already covered by CVE-2008-2565.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
chatelao php address book 4.0.1 |
||
chatelao php address book 4.0.2 |