7 matches found
CVE-2024-48589
phpAbook 9.0i - クロスサイトスクリプティング XSS の脆弱性 CVE-2024-48589 概要: クロスサイトスクリプティング XSS の脆弱性が、phpAbook アプリケーションの index.php の rol パラメータ、またはパス部分で発見されました。この脆弱性により、攻撃者はユーザーのブラウザ上で任意の JavaScript コードを注入できる可能性があり、以下の結果を引き起こす可能性があります。 セッション Cookie を含む機密情報の開示 アプリケーションコンテキスト内での不正な操作...
CVE-2024-48589
Cross Site Scripting vulnerability in Gilnei Moraes phpABook v.0.9 allows a remote attacker to execute arbitrary code via the rol parameter in index.php...
CVE-2024-48589
Cross Site Scripting vulnerability in Gilnei Moraes phpABook v.0.9 allows a remote attacker to execute arbitrary code via the rol parameter in index.php...
phpABook 安全漏洞
phpABook is a simple address/contact management system using PHP and MySQL by the individual developer Gilnei Moraes in Brazil. A security vulnerability exists in phpABook version v.0.9. An attacker can exploit this vulnerability to execute arbitrary code via the rol parameter in index.php...
CVE-2024-48589
Gilnei Moraes phpABook v.0.9 is vulnerable to a Cross-Site Scripting (XSS) vulnerability due to improper validation and sanitization of user-supplied input. An attacker can inject arbitrary JavaScript code by supplying a malicious payload via the rol parameter in index.php or through the applicat...
PT-2025-5874 · Gilnei Moraes · Phpabook
Name of the Vulnerable Software and Affected Versions: Gilnei Moraes phpABook version 0.9 Description: The issue allows a remote attacker to execute arbitrary code via the rol parameter in "index.php". This is a Cross Site Scripting issue. Recommendations: For Gilnei Moraes phpABook version 0.9,...
