PT-2013-2121 · Php · Php Address Book

Jurgen Voorneveld · Published 2013-04-09 · Updated 2017-08-29 · CVE-2013-0135

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP Address Book version 8.2.5

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via various parameters to different PHP files, including the id parameter to "/addressbook/register/delete user.php", "/addressbook/register/edit user.php", or "/addressbook/register/edit user save.php"; the email parameter to "/addressbook/register/edit user save.php", "/addressbook/register/reset password.php", "/addressbook/register/reset password save.php", or "/addressbook/register/user add save.php"; the username parameter to "/addressbook/register/checklogin.php" or "/addressbook/register/reset password save.php"; the lastname, firstname, phone, permissions, or notes parameter to "/addressbook/register/edit user save.php"; the q parameter to "/addressbook/register/admin index.php"; the site parameter to "/addressbook/register/linktick.php"; the password parameter to "/addressbook/register/reset password.php"; the password hint parameter to "/addressbook/register/reset password save.php"; the var parameter to "/addressbook/register/traffic.php"; or a BasicLogin cookie to "/addressbook/register/router.php".

Recommendations For PHP Address Book version 8.2.5, consider disabling the vulnerable parameters and API endpoints until a patch is available. Restrict access to the affected PHP files to minimize the risk of exploitation. Avoid using the specified parameters in the affected API endpoints until the issue is resolved. As a temporary workaround, consider implementing input validation and sanitization for the id, email, username, lastname, firstname, phone, permissions, notes, q, site, password, password hint, and var parameters, as well as for the BasicLogin cookie.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2013-0135

Affected Products

Php Address Book

References · 16

• 🔥 https://exploit-db.com/exploits/38431 · Exploit
• 🔥 https://exploit-db.com/exploits/38435 · Exploit
• 🔥 http://packetstormsecurity.com/files/129789/PHP-Address-Book-Cross-Site-Scripting-SQL-Injection.html · Exploit
• 🔥 https://exploit-db.com/exploits/38433 · Exploit
• 🔥 https://exploit-db.com/exploits/38429 · Exploit
• 🔥 https://exploit-db.com/exploits/38425 · Exploit
• 🔥 https://exploit-db.com/exploits/38426 · Exploit
• 🔥 https://exploit-db.com/exploits/38434 · Exploit
• 🔥 http://kb.cert.org/vuls/id/183692 · Exploit
• 🔥 https://exploit-db.com/exploits/38432 · Exploit
• 🔥 http://acadion.nl/labs/advisory/20130203-phpaddressbook.html · Exploit
• 🔥 https://exploit-db.com/exploits/38428 · Exploit
• 🔥 https://exploit-db.com/exploits/38427 · Exploit
• 🔥 https://exploit-db.com/exploits/38430 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-0135 · Security Note