CVE-2020-8510

An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en user+perms+lang, one can login as any user without a password...

CVE-2024-48589

Gilnei Moraes phpABook v.0.9 is vulnerable to a Cross-Site Scripting (XSS) vulnerability due to improper validation and sanitization of user-supplied input. An attacker can inject arbitrary JavaScript code by supplying a malicious payload via the rol parameter in index.php or through the applicat...

Exploit for CVE-2024-48589

phpAbook 9.0i - Cross-Site Scripting XSS Vulnerability CVE-...

CVE-2022-30352

phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "authuser" parameter in index.php script...

Sql injection

phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "authuser" parameter in index.php script...