PHP Address Book - '/addressbook/register/delete_user.php?id' SQL Injection

source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit laten...

PHP Address Book - '/addressbook/register/reset_password_save.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit laten...

PHP Address Book - group Cross-Site Scripting

PHP Address Book - group Cross-Site Scripting source: https://www.securityfocus.com/bid/56937/info PHP Address Book is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

PHP Address Book - 'group' Cross-Site Scripting

source: https://www.securityfocus.com/bid/56937/info PHP Address Book is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

CVE-2012-1912

Cross-site scripting XSS vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter. NOTE: the index.php vector is already covered by CVE-2008-2566...

CVE-2012-1911

Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 togroup parameter to group.php or 2 id parameter to vcard.php. NOTE: the edit.php vector is already covered by CVE-2008-2565...

CVE-2012-1912

Technical details about CVE-2012-1912 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2012-1911: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 togroup parameter to group.php or 2 id parameter to vcard.php. NOTE: the edit.php vector is already covered by CVE-2008-2565...

CVE-2012-1912: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter. NOTE: the index.php vector is already covered by CVE-2008-2566...

PT-2012-3647

Name of the Vulnerable Software and Affected Versions PHP Address Book versions 7.0 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the from parameter in preferences.php. Recommendations For PHP Address Book versions 7.0 and...

PT-2012-3646

Name of the Vulnerable Software and Affected Versions PHP Address Book versions 6.2.12 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the to group parameter to "group.php" or the id parameter to "vcard.php". Recommendations Fo...

PHP Address Book 7.0.0 SQL Injection

SQL Injection vulnerability in PHP Address Book view.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

PHP Address Book 7.0.0 plurality of defect and repair-vulnerability warning-the black bar safety net

Title: PHP Address Book 7.0.0 Multiple security vulnerabilities Author: Stefan Schurtz Affected Software: Successfully tested on PHP Address Book 7.0.0 Developer website: http://sourceforge.net/projects/php-addressbook/ Defect description PHP Address Book 7.0.0 containing multiple XSS and SQLi...

PHP Address Book Multiple Cross Site Scripting Vulnerabilities

This host is running PHP Address Book and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodphpaddressbookmultxssvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ PHP Address Book Multiple Cross Site Scripting Vulnerabilities Authors: Sooraj KS Copyright:...

PHP Address Book Multiple XSS Vulnerabilities

PHP Address Book is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2012-2903

Multiple cross-site scripting XSS vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to group.php, or the 2 targetlanguage or 3 targetflag parameter to translate.php...

CVE-2012-2903

PHP Address Book 7.0 and earlier is affected by multiple XSS vulnerabilities. The issues allow remote attackers to inject arbitrary script/HTML via (1) PATH_INFO to group.php, and (2) target_language or (3) target_flag to translate.php. Affected software: PHP Address Book. Root cause: input vecto...

CVE-2012-2903

Multiple cross-site scripting XSS vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to group.php, or the 2 targetlanguage or 3 targetflag parameter to translate.php...

CVE-2012-2903: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to group.php, or the 2 targetlanguage or 3 targetflag parameter to translate.php...

PT-2012-4349

Name of the Vulnerable Software and Affected Versions PHP Address Book versions 7.0 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the PATH INFO to "group.php", or the target language or target flag parameter to...