PT-2012-3646

Name of the Vulnerable Software and Affected Versions PHP Address Book versions 6.2.12 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the to group parameter to "group.php" or the id parameter to "vcard.php". Recommendations Fo...