PT-2009-2116 · Phpaddressbook · Php Address Book

Publicado 2009-04-07 · Atualizado 2018-10-11 · CVE-2008-6646

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions phpAddressBook version 2.0

Description The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the username parameter in the index.php file.

Recommendations For phpAddressBook version 2.0, avoid using the username parameter in the affected index.php file until a fix is available. Consider validating and sanitizing user input to prevent malicious code injection.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-6646

Produtos afetados

Php Address Book

Referências · 4

• 🔥 http://securityfocus.com/bid/29005 · Exploit
• http://securityfocus.com/archive/1/491525/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-6646 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42140 · Nota