CH
Vendor
chatelao
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2020-37083 | PA PHP Address Book chatelao | 8.2 | Feb 3 | addressbook 9.0.0.1 - 'id' SQL Injection |
| CVE-2013-1749 | PA Php Address Book Chatelao | – | Apr 18 | Cross-site scripting (XSS) vulnerability in edit.php in PHP Address Book 8.2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via the Address field |
| CVE-2013-1748 | PA Php Address Book Chatelao | – | Apr 18 | Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) edit.php or (2)… |
| CVE-2013-2778 | PA Php Address Book Chatelao | – | Apr 9 | Cross-site request forgery (CSRF) vulnerability in addressbook/register/delete_user.php in PHP Address Book 8.2.5 allows remote attackers to hijack the authentication of… |
| CVE-2013-0135 | PA Php Address Book Chatelao | – | Apr 9 | Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1)… |
| CVE-2012-1912 | PA Php Address Book Chatelao | – | Sep 9 | Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the from… |
| CVE-2012-1911 | PA Php Address Book Chatelao | – | Sep 9 | Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) to_group parameter to group.php… |
| CVE-2012-2903 | PA Php Address Book Chatelao | – | May 21 | Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to… |
| CVE-2009-2608 | PA Php Address Book Chatelao | – | Jul 27 | Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to delete.php or (2) alphabet… |