PA
Product
PHP Address Book
9
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add PHP Address Book to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-37083 | 8.2 | Feb 3 | addressbook 9.0.0.1 - 'id' SQL Injection Affected: 9.0.0.1 |
| CVE-2013-1749 | – | Apr 18 | Cross-site scripting (XSS) vulnerability in edit.php in PHP Address Book 8.2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via the Address field Affected: 8.2.5 |
| CVE-2013-1748 | – | Apr 18 | Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) edit.php or (2)… Affected: 8.2.5 |
| CVE-2013-2778 | – | Apr 9 | Cross-site request forgery (CSRF) vulnerability in addressbook/register/delete_user.php in PHP Address Book 8.2.5 allows remote attackers to hijack the authentication of… Affected: 8.2.5 |
| CVE-2013-0135 | – | Apr 9 | Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1)… Affected: 8.2.5 |
| CVE-2012-1912 | – | Sep 9 | Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the from… Affected: through 7.0; 1.0; 1.2; 2.0; 2.1; 2.1.1; +34 more |
| CVE-2012-1911 | – | Sep 9 | Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) to_group parameter to group.php… Affected: through 6.2.11; 1.0; 1.2; 2.0; 2.1; 2.1.1; +34 more |
| CVE-2012-2903 | – | May 21 | Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to… Affected: through 6.1.1; 1.0; 1.2; 2.0; 2.1; 2.1.1; +34 more |
| CVE-2009-2608 | – | Jul 27 | Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to delete.php or (2) alphabet… Affected: 4.0.1; 4.0.2 |
Showing 9