CVE-2024-48589

phpAbook 9.0i - 크로스 사이트 스크립팅XSS 취약점 CVE-2024-48589 요약: phpAbook 애플리케이션의 index.php의 rol 매개변수 또는 경로 섹션에서 크로스 사이트 스크립팅XSS 취약점이 발견되었습니다. 이 취약점으로 인해 공격자가 사용자의 브라우저에 임의의 JavaScript 코드를 주입할 수 있으며, 이로 인해 다음이 발생할 수 있습니다: 세션 쿠키를 포함한 민감한 정보 노출 애플리케이션 컨텍스트 내에서의 무단 작업 이 문제는 사용자 입력에 대한 부적절한 검증 및 정화sanitization...

EUVD-2020-29376

Malware in sbrugna...

EUVD-2008-4471

Malware in sbrugna...

EUVD-2022-52284

Malicious code in bioql PyPI...

EUVD-2025-5033

Malicious code in bioql PyPI...

CVE-2022-30352

phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "authuser" parameter in index.php script...

CVE-2020-8510

An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en user+perms+lang, one can login as any user without a password...

CVE-2024-48589

Cross Site Scripting vulnerability in Gilnei Moraes phpABook v.0.9 allows a remote attacker to execute arbitrary code via the rol parameter in index.php...

CVE-2024-48589

Cross Site Scripting vulnerability in Gilnei Moraes phpABook v.0.9 allows a remote attacker to execute arbitrary code via the rol parameter in index.php...

phpABook 安全漏洞

phpABook is a simple address/contact management system using PHP and MySQL by the individual developer Gilnei Moraes in Brazil. A security vulnerability exists in phpABook version v.0.9. An attacker can exploit this vulnerability to execute arbitrary code via the rol parameter in index.php...

CVE-2024-48589

Cross Site Scripting vulnerability in Gilnei Moraes phpABook v.0.9 allows a remote attacker to execute arbitrary code via the rol parameter in index.php...

CVE-2024-48589

Cross Site Scripting vulnerability in Gilnei Moraes phpABook v.0.9 allows a remote attacker to execute arbitrary code via the rol parameter in index.php...

CVE-2024-48589

The Gilnei Moraes phpABook v.0.9 application is vulnerable to Cross-Site Scripting (XSS) due to improper input validation and sanitization of the rol parameter within index.php . An attacker can inject arbitrary JavaScript by craftily constructing URLs containing malicious scripts in the rol para...

CVE-2024-48589: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Gilnei Moraes phpABook v.0.9 allows a remote attacker to execute arbitrary code via the rol parameter in index.php...

PT-2025-5874 · Gilnei Moraes · Phpabook

Name of the Vulnerable Software and Affected Versions: Gilnei Moraes phpABook version 0.9 Description: The issue allows a remote attacker to execute arbitrary code via the rol parameter in "index.php". This is a Cross Site Scripting issue. Recommendations: For Gilnei Moraes phpABook version 0.9,...

Exploit for CVE-2024-48589

phpAbook 9.0i - Cross-Site Scripting XSS Vulnerability CVE-...

phpABook SQL Injection Vulnerability

phpABook is a simple address/contact management system using PHP and MySQL. phpABook version 0.9i is vulnerable to a SQL injection vulnerability caused by a failure to properly clean up the "authuser" parameter in the index.php script. An attacker could use this vulnerability to execute illegal S...

CVE-2022-30352

phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "authuser" parameter in index.php script...

CVE-2022-30352

phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "authuser" parameter in index.php script...

CVE-2022-30352

phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "authuser" parameter in index.php script...