8 matches found
CVE-2024-48589
phpAbook 9.0i - Cross-Site Scripting XSS Vulnerability CVE-2024-48589 Summary: A Cross-Site Scripting XSS vulnerability was discovered in the rol parameter of index.php or the path section in the phpAbook application. This vulnerability allows an attacker to inject arbitrary JavaScript code into ...
CVE-2024-48589
Cross Site Scripting vulnerability in Gilnei Moraes phpABook v.0.9 allows a remote attacker to execute arbitrary code via the rol parameter in index.php...
CVE-2024-48589
Cross Site Scripting vulnerability in Gilnei Moraes phpABook v.0.9 allows a remote attacker to execute arbitrary code via the rol parameter in index.php...
phpABook 安全漏洞
phpABook is a simple address/contact management system using PHP and MySQL by the individual developer Gilnei Moraes in Brazil. A security vulnerability exists in phpABook version v.0.9. An attacker can exploit this vulnerability to execute arbitrary code via the rol parameter in index.php...
CVE-2024-48589
The Gilnei Moraes phpABook v.0.9 application is vulnerable to Cross-Site Scripting (XSS) due to improper input validation and sanitization of the rol parameter within index.php . An attacker can inject arbitrary JavaScript by craftily constructing URLs containing malicious scripts in the rol para...
PT-2025-5874 · Gilnei Moraes · Phpabook
Name of the Vulnerable Software and Affected Versions: Gilnei Moraes phpABook version 0.9 Description: The issue allows a remote attacker to execute arbitrary code via the rol parameter in "index.php". This is a Cross Site Scripting issue. Recommendations: For Gilnei Moraes phpABook version 0.9,...
CVE-2024-48589: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Gilnei Moraes phpABook v.0.9 allows a remote attacker to execute arbitrary code via the rol parameter in index.php...
