Sql injection

2007-02-2702:28:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.6%

JSON

Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) 1.00 allow remote attackers to execute arbitrary SQL commands via the id parameter to the (1) updateRow and (2) deleteRow functions in functions.php. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
address_book_continuedeq1.01
address_book_continuedeq1.00

CPE	Name	Operator	Version
	address_book_continued	eq	1.01
	address_book_continued	eq	1.00

References

secunia.com/advisories/24269

sourceforge.net/project/shownotes.php?release_id=488406

www.securityfocus.com/bid/22685

www.vupen.com/english/advisories/2007/0715

exchange.xforce.ibmcloud.com/vulnerabilities/32665