Sql injection

2009-07-2718:30:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.5%

JSON

Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to delete.php or (2) alphabet parameter to index.php. NOTE: the edit.php and view.php vectors are already covered by CVE-2008-2565.

CPENameOperatorVersion
php_address_bookeq4.0.1
php_address_bookeq4.0.2

CPE	Name	Operator	Version
	php_address_book	eq	4.0.1
	php_address_book	eq	4.0.2

References

secunia.com/advisories/35590

www.securityfocus.com/archive/1/504595/100/0/threaded

www.securityfocus.com/bid/35511

www.exploit-db.com/exploits/9023