CVE-2008-2565

Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.php and (2) edit.php. NOTE: it was later reported that 4.0.x is also affected.

Link	Resource
http://secunia.com/advisories/30540	Vendor Advisory
http://secunia.com/advisories/35590	Vendor Advisory
http://www.securityfocus.com/bid/35511
http://packetstormsecurity.com/files/129789/PHP-Address-Book-Cross-Site-Scripting-SQL-Injection.html	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/99622
https://exchange.xforce.ibmcloud.com/vulnerabilities/42855
https://www.exploit-db.com/exploits/9023
https://www.exploit-db.com/exploits/5739
http://www.securityfocus.com/archive/1/504595/100/0/threaded

Configuration 1

cpe:2.3:a:php-address_book:php-address_book:2.0:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.4.8:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:2.2:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.4.4:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:2.4:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.4.1:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.1:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.1.2:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:1.2:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.4.2:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.3.17:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:*:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.4.7:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:2.1:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.1.5:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.1.1:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.1.3:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.0:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.3.16:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.1.4:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.3.18:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.4.3:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:2.3:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.4.5:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.4.6:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:2.6:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:2.1.1:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:1.0:*:*:*:*:*:*:* cpe:2.3:a:php-address_book:php-address_book:3.4:*:*:*:*:*:*:*

---

Published : 2008-06-06 06:32

Updated : 2018-10-11 08:41

---

NVD link : CVE-2008-2565

Mitre link : CVE-2008-2565

No products.

CWE-89