CVE-2020-8510

An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en user+perms+lang, one can login as any user without a password...

CVE-2024-48589

CVE-2024-48589 affects Gilnei Moraes phpABook v0.9. It is a Cross Site Scripting vulnerability in index.php via the rol parameter, allowing a remote attacker to cause arbitrary code execution in the context of the victim’s browser. Public references describe a payload path that enables XSS, with ...

Exploit for CVE-2024-48589

phpAbook 9.0i - Cross-Site Scripting XSS Vulnerability CVE-...

CVE-2022-30352

phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "authuser" parameter in index.php script...

Sql injection

phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "authuser" parameter in index.php script...