CVE-2012-1911 Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) to_group parameter to group.php or (2) id parameter t...
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) to_group parameter to group.php or (2) id parameter to vcard.php. NOTE: the edit.php vector is already covered by CVE-2008-2565.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chatelao php address book | <= 6.2.11 | No fix listed |
| chatelao php address book | = 1.0 | No fix listed |
| chatelao php address book | = 1.2 | No fix listed |
| chatelao php address book | = 2.0 | No fix listed |
| chatelao php address book | = 2.1 | No fix listed |
| chatelao php address book | = 2.1.1 | No fix listed |
| chatelao php address book | = 2.2 | No fix listed |
| chatelao php address book | = 2.3 | No fix listed |
| chatelao php address book | = 2.4 | No fix listed |
| chatelao php address book | = 2.6 | No fix listed |
| chatelao php address book | = 3.0 | No fix listed |
| chatelao php address book | = 3.1 | No fix listed |
| chatelao php address book | = 3.1.1 | No fix listed |
| chatelao php address book | = 3.1.2 | No fix listed |
| chatelao php address book | = 3.1.3 | No fix listed |
| chatelao php address book | = 3.1.4 | No fix listed |
| chatelao php address book | = 3.1.5 | No fix listed |
| chatelao php address book | = 3.1.6 | No fix listed |
| chatelao php address book | = 3.2 | No fix listed |
| chatelao php address book | = 3.2.1 | No fix listed |
| chatelao php address book | = 3.2.2 | No fix listed |
| chatelao php address book | = 3.2.3 | No fix listed |
| chatelao php address book | = 3.2.4 | No fix listed |
| chatelao php address book | = 3.2.5 | No fix listed |
| chatelao php address book | = 3.2.6 | No fix listed |
Show 80 more
| Product | Affected versions | Fixed in |
|---|---|---|
| chatelao php address book | = 3.2.7 | No fix listed |
| chatelao php address book | = 3.2.8 | No fix listed |
| chatelao php address book | = 3.2.9 | No fix listed |
| chatelao php address book | = 3.2.10 | No fix listed |
| chatelao php address book | = 3.2.11 | No fix listed |
| chatelao php address book | = 3.2.12 | No fix listed |
| chatelao php address book | = 3.2.13 | No fix listed |
| chatelao php address book | = 3.2.14 | No fix listed |
| chatelao php address book | = 3.3 | No fix listed |
| chatelao php address book | = 3.3.1 | No fix listed |
| chatelao php address book | = 3.3.2 | No fix listed |
| chatelao php address book | = 3.3.3 | No fix listed |
| chatelao php address book | = 3.3.4 | No fix listed |
| chatelao php address book | = 3.3.5 | No fix listed |
| chatelao php address book | = 3.3.6 | No fix listed |
| chatelao php address book | = 3.3.7 | No fix listed |
| chatelao php address book | = 3.3.8 | No fix listed |
| chatelao php address book | = 3.3.9 | No fix listed |
| chatelao php address book | = 3.3.10 | No fix listed |
| chatelao php address book | = 3.3.12 | No fix listed |
| chatelao php address book | = 3.3.13 | No fix listed |
| chatelao php address book | = 3.3.14 | No fix listed |
| chatelao php address book | = 3.3.15 | No fix listed |
| chatelao php address book | = 3.3.16 | No fix listed |
| chatelao php address book | = 3.3.17 | No fix listed |
| chatelao php address book | = 3.3.18 | No fix listed |
| chatelao php address book | = 3.4 | No fix listed |
| chatelao php address book | = 3.4.1 | No fix listed |
| chatelao php address book | = 3.4.2 | No fix listed |
| chatelao php address book | = 3.4.3 | No fix listed |
| chatelao php address book | = 3.4.4 | No fix listed |
| chatelao php address book | = 3.4.5 | No fix listed |
| chatelao php address book | = 3.4.6 | No fix listed |
| chatelao php address book | = 3.4.7 | No fix listed |
| chatelao php address book | = 3.4.8 | No fix listed |
| chatelao php address book | = 3.4.9 | No fix listed |
| chatelao php address book | = 4.0 | No fix listed |
| chatelao php address book | = 4.0.2 | No fix listed |
| chatelao php address book | = 4.1.1 | No fix listed |
| chatelao php address book | = 4.1.3 | No fix listed |
| chatelao php address book | = 4.1.4 | No fix listed |
| chatelao php address book | = 5.0 | No fix listed |
| chatelao php address book | = 5.0-beta | No fix listed |
| chatelao php address book | = 5.1 | No fix listed |
| chatelao php address book | = 5.2 | No fix listed |
| chatelao php address book | = 5.3 | No fix listed |
| chatelao php address book | = 5.4 | No fix listed |
| chatelao php address book | = 5.4.1 | No fix listed |
| chatelao php address book | = 5.4.2 | No fix listed |
| chatelao php address book | = 5.4.3 | No fix listed |
| chatelao php address book | = 5.4.4 | No fix listed |
| chatelao php address book | = 5.4.5 | No fix listed |
| chatelao php address book | = 5.4.6 | No fix listed |
| chatelao php address book | = 5.4.7 | No fix listed |
| chatelao php address book | = 5.4.9 | No fix listed |
| chatelao php address book | = 5.5 | No fix listed |
| chatelao php address book | = 5.6 | No fix listed |
| chatelao php address book | = 5.7 | No fix listed |
| chatelao php address book | = 5.7.1 | No fix listed |
| chatelao php address book | = 5.7.2 | No fix listed |
| chatelao php address book | = 5.7.3 | No fix listed |
| chatelao php address book | = 5.7.4 | No fix listed |
| chatelao php address book | = 5.7.5 | No fix listed |
| chatelao php address book | = 5.8.1 | No fix listed |
| chatelao php address book | = 6.0 | No fix listed |
| chatelao php address book | = 6.1 | No fix listed |
| chatelao php address book | = 6.1.1 | No fix listed |
| chatelao php address book | = 6.1.2 | No fix listed |
| chatelao php address book | = 6.1.3 | No fix listed |
| chatelao php address book | = 6.1.4 | No fix listed |
| chatelao php address book | = 6.2 | No fix listed |
| chatelao php address book | = 6.2.1 | No fix listed |
| chatelao php address book | = 6.2.2 | No fix listed |
| chatelao php address book | = 6.2.3 | No fix listed |
| chatelao php address book | = 6.2.4 | No fix listed |
| chatelao php address book | = 6.2.5 | No fix listed |
| chatelao php address book | = 6.2.6 | No fix listed |
| chatelao php address book | = 6.2.7 | No fix listed |
| chatelao php address book | = 6.2.9 | No fix listed |
| chatelao php address book | = 6.2.10 | No fix listed |
References
- sourceforge.net
- sourceforge.net
- www.darksecurity.de exploit
- 18578 exploit
- 52396 exploit vdb-entry
- phpaddressbook-multiple-sql-injection(73943) vdb-entry