PT-2013-3922

Name of the Vulnerable Software and Affected Versions PHP Address Book version 8.2.5 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that delete accounts. Recommendations For PHP Address Book version 8.2.5,...

CVE-2013-0135: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 addressbook/register/deleteuser.php, 2 addressbook/register/edituser.php, or 3 addressbook/register/editusersave.php; the email parameter to 4...

PHP Address Book - addressbookregisterchecklogin.php?Username SQL Injection

PHP Address Book - addressbookregisterchecklogin.php?Username SQL Injection source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an...

PHP Address Book - addressbookregisteredit_user.php?id SQL Injection

PHP Address Book - addressbookregisteredituser.php?id SQL Injection source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to...

PHP Address Book - addressbookregisteradmin_index.php?q SQL Injection

PHP Address Book - addressbookregisteradminindex.php?q SQL Injection source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker t...

PHP Address Book - addressbookregisteredit_user_save.php Multiple SQL Injections

PHP Address Book - addressbookregistereditusersave.php Multiple SQL Injections source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an...

PHP Address Book - addressbookregisterreset_password.php Multiple SQL Injections

PHP Address Book - addressbookregisterresetpassword.php Multiple SQL Injections source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an...

PHP Address Book - addressbookregisterlinktick.php?site SQL Injection

PHP Address Book - addressbookregisterlinktick.php?site SQL Injection source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker ...

PHP Address Book - addressbookregisteruser_add_save.php?email SQL Injection

PHP Address Book - addressbookregisteruseraddsave.php?email SQL Injection source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an...

PHP Address Book - addressbookregisterreset_password_save.php Multiple SQL Injections

PHP Address Book - addressbookregisterresetpasswordsave.php Multiple SQL Injections source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allo...

PHP Address Book sqli vulnerability

Overview PHP Address Book web application is vulnerable to multiple sqli injection vulnerabilities. Description CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'PHP Address Book 8.2.5 and possibly older versions fail to sanitize input from multiple...

PHP Address Book - '/addressbook/register/reset_password.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit laten...

PHP Address Book - '/addressbook/register/reset_password_save.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit laten...

PHP Address Book - '/addressbook/register/traffic.php?var' SQL Injection

source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit laten...

PHP Address Book - '/addressbook/register/admin_index.php?q' SQL Injection

source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit laten...

PHP Address Book - '/addressbook/register/delete_user.php?id' SQL Injection

source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit laten...

PHP Address Book - '/addressbook/register/checklogin.php?Username' SQL Injection

source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit laten...

PHP Address Book - '/addressbook/register/edit_user.php?id' SQL Injection

source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit laten...

PHP Address Book - '/addressbook/register/linktick.php?site' SQL Injection

source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit laten...

PHP Address Book - '/addressbook/register/router.php?BasicLogin' Cookie SQL Injection

source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit laten...