PT-2009-2614 · Phpaddressbook · Php Address Book

Publicado 2009-09-01 · Atualizado 2018-10-11 · CVE-2008-7145

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpAddressBook version 2.0

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the username or other parameters.

Recommendations For phpAddressBook version 2.0, update to a version that fixes the SQL injection vulnerabilities.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-7145

Produtos afetados

Php Address Book

Referências · 5

• 🔥 http://osvdb.org/51050 · Exploit
• 🔥 http://securityfocus.com/bid/28456 · Exploit
• 🔥 https://exploit-db.com/exploits/31539 · Exploit
• http://securityfocus.com/archive/1/490097/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-7145 · Nota de Segurança