Vulnerabilities

TI-2008-02457 CVE-2008-2566 · GHSA-j4wm-6wrv-77w7

Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 3.1.5 and earlier…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the group parameter to (1) index.php or (2) the default URI.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01526 Published 2008-06-06 No fix listed CWE-79

TI-2008-02456 CVE-2008-2565 · GHSA-fp92-9hf4-f2wx

Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote…

LOW 37

Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.php and (2) edit.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01912 Published 2008-06-06 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 3.1.5 and earlier…

Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote…