PT-2009-2116 · Phpaddressbook · Php Address Book

Published 2009-04-07 · Updated 2018-10-11 · CVE-2008-6646

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions phpAddressBook version 2.0

Description The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the username parameter in the index.php file.

Recommendations For phpAddressBook version 2.0, avoid using the username parameter in the affected index.php file until a fix is available. Consider validating and sanitizing user input to prevent malicious code injection.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2008-6646

Affected Products

Php Address Book

References · 4

• 🔥 http://securityfocus.com/bid/29005 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6646 · Security Note
• http://securityfocus.com/archive/1/491525/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42140 · Note