Описание
Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to delete.php or (2) alphabet parameter to index.php. NOTE: the edit.php and view.php vectors are already covered by CVE-2008-2565.
Ссылки
- Vendor Advisory
- Exploit
- Vendor Advisory
- Exploit
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:chatelao:php_address_book:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:chatelao:php_address_book:4.0.2:*:*:*:*:*:*:*
EPSS
Процентиль: 58%
0.00913
Низкий
6.8 Medium
CVSS2
Дефекты
CWE-89
Связанные уязвимости
github
больше 4 лет назад
Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to delete.php or (2) alphabet parameter to index.php. NOTE: the edit.php and view.php vectors are already covered by CVE-2008-2565.
EPSS
Процентиль: 58%
0.00913
Низкий
6.8 Medium
CVSS2
Дефекты
CWE-89