7.5
CVSSv2

CVE-2012-1911

Published: 09/09/2012 Updated: 29/08/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) to_group parameter to group.php or (2) id parameter to vcard.php. NOTE: the edit.php vector is already covered by CVE-2008-2565.

Vulnerable Product Search on Vulmon Subscribe to Product

chatelao php address book 6.2.9

chatelao php address book 6.2.7

chatelao php address book 6.2

chatelao php address book 6.1.4

chatelao php address book 5.7.3

chatelao php address book 5.8.1

chatelao php address book 5.7.5

chatelao php address book 5.4.4

chatelao php address book 5.4.3

chatelao php address book 5.0

chatelao php address book 5.4.2

chatelao php address book 4.0.2

chatelao php address book 3.2.6

chatelao php address book 3.2.13

chatelao php address book 3.1.5

chatelao php address book 3.2.5

chatelao php address book 3.3.8

chatelao php address book 3.3

chatelao php address book 3.2.14

chatelao php address book 3.4.7

chatelao php address book 3.4.8

chatelao php address book 3.4.3

chatelao php address book 3.4.4

chatelao php address book 3.1

chatelao php address book 3.0

chatelao php address book 2.0

chatelao php address book 1.2

chatelao php address book 6.2.4

chatelao php address book 6.2.3

chatelao php address book 6.1.1

chatelao php address book 6.1

chatelao php address book 5.7.2

chatelao php address book 5.7.1

chatelao php address book 5.4.7

chatelao php address book 5.2

chatelao php address book 5.3

chatelao php address book 4.1.3

chatelao php address book 3.2.9

chatelao php address book 3.2.10

chatelao php address book 3.2.1

chatelao php address book 3.2.2

chatelao php address book 3.3.9

chatelao php address book 3.3.13

chatelao php address book 3.3.12

chatelao php address book 3.3.4

chatelao php address book 3.3.3

chatelao php address book 3.3.18

chatelao php address book 3.4

chatelao php address book 3.1.4

chatelao php address book 3.1.3

chatelao php address book 2.3

chatelao php address book 2.2

chatelao php address book

chatelao php address book 6.2.10

chatelao php address book 6.2.2

chatelao php address book 6.2.1

chatelao php address book 6.0

chatelao php address book 5.7.4

chatelao php address book 5.4.6

chatelao php address book 5.4.5

chatelao php address book 5.1

chatelao php address book 4.1.4

chatelao php address book 4.0

chatelao php address book 4.1.1

chatelao php address book 3.2.11

chatelao php address book 3.2.12

chatelao php address book 3.2.3

chatelao php address book 3.2.4

chatelao php address book 3.3.15

chatelao php address book 3.3.14

chatelao php address book 3.3.6

chatelao php address book 3.3.5

chatelao php address book 3.3.16

chatelao php address book 3.3.17

chatelao php address book 3.1.2

chatelao php address book 3.1.1

chatelao php address book 2.1.1

chatelao php address book 2.1

chatelao php address book 6.2.6

chatelao php address book 6.2.5

chatelao php address book 6.1.3

chatelao php address book 6.1.2

chatelao php address book 5.7

chatelao php address book 5.6

chatelao php address book 5.5

chatelao php address book 5.4.9

chatelao php address book 5.4.1

chatelao php address book 5.4

chatelao php address book 3.2.7

chatelao php address book 3.2.8

chatelao php address book 3.1.6

chatelao php address book 3.2

chatelao php address book 3.3.7

chatelao php address book 3.3.10

chatelao php address book 3.3.2

chatelao php address book 3.3.1

chatelao php address book 3.4.5

chatelao php address book 3.4.6

chatelao php address book 3.4.1

chatelao php address book 3.4.2

chatelao php address book 3.4.9

chatelao php address book 2.6

chatelao php address book 2.4

chatelao php address book 1.0

Exploits

Advisory: PHP Address Book 6212 Multiple security vulnerabilities Advisory ID: SSCHADV2012-007 Author: Stefan Schurtz Affected Software: Successfully tested on PHP Address Book 6212 Vendor URL: sourceforgenet/projects/php-addressbook/ Vendor Status: informed ========================== Vulnerability Description =================== ...