CVE-2008-7145 Multiple SQL injection vulnerabilities in index.php in CoronaMatrix phpAddressBook 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) parameters.
HighCVSS 7.5
EPSS 0.96%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in index.php in CoronaMatrix phpAddressBook 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| coronamatrix phpaddressbook | = 2.0 | No fix listed |
References
- 51050 exploit vdb-entry
- 20080326 php-addressbook v2.0 SQL Injection Vulnerbility mailing-list
- 28456 exploit vdb-entry