1 matches found
CVE-2013-0135: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 addressbook/register/deleteuser.php, 2 addressbook/register/edituser.php, or 3 addressbook/register/editusersave.php; the email parameter to 4...
7.5CVSS6.2AI score0.02978EPSS
SaveExploits12References2
20