Phpabook Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Phpabook Project records in CISA KEV

No Phpabook Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Phpabook · all components

TI-2022-12577 CVE-2022-30352 · GHSA-3jh3-33p7-v8h9

MEDIUM 46

phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "auth_user" parameter in index.php script.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01889 Published 2022-05-27 No fix listed CWE-89

TI-2020-06830 CVE-2020-8510 · GHSA-gm98-pmgw-v2qw

MEDIUM 45

An issue was discovered in phpABook 0.9 Intermediate.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01247 Published 2020-02-03 No fix listed CWE-287