CVE-2012-1912 Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter. NOTE: the index.p...
MediumCVSS 4.3
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter. NOTE: the index.php vector is already covered by CVE-2008-2566.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chatelao php address book | <= 7.0 | No fix listed |
| chatelao php address book | = 1.0 | No fix listed |
| chatelao php address book | = 1.2 | No fix listed |
| chatelao php address book | = 2.0 | No fix listed |
| chatelao php address book | = 2.1 | No fix listed |
| chatelao php address book | = 2.1.1 | No fix listed |
| chatelao php address book | = 2.2 | No fix listed |
| chatelao php address book | = 2.3 | No fix listed |
| chatelao php address book | = 2.4 | No fix listed |
| chatelao php address book | = 2.6 | No fix listed |
| chatelao php address book | = 3.0 | No fix listed |
| chatelao php address book | = 3.1 | No fix listed |
| chatelao php address book | = 3.1.1 | No fix listed |
| chatelao php address book | = 3.1.2 | No fix listed |
| chatelao php address book | = 3.1.3 | No fix listed |
| chatelao php address book | = 3.1.4 | No fix listed |
| chatelao php address book | = 3.1.5 | No fix listed |
| chatelao php address book | = 3.1.6 | No fix listed |
| chatelao php address book | = 3.2 | No fix listed |
| chatelao php address book | = 3.2.1 | No fix listed |
| chatelao php address book | = 3.2.2 | No fix listed |
| chatelao php address book | = 3.2.3 | No fix listed |
| chatelao php address book | = 3.2.4 | No fix listed |
| chatelao php address book | = 3.2.5 | No fix listed |
| chatelao php address book | = 3.2.6 | No fix listed |
Show 82 more
| Product | Affected versions | Fixed in |
|---|---|---|
| chatelao php address book | = 3.2.7 | No fix listed |
| chatelao php address book | = 3.2.8 | No fix listed |
| chatelao php address book | = 3.2.9 | No fix listed |
| chatelao php address book | = 3.2.10 | No fix listed |
| chatelao php address book | = 3.2.11 | No fix listed |
| chatelao php address book | = 3.2.12 | No fix listed |
| chatelao php address book | = 3.2.13 | No fix listed |
| chatelao php address book | = 3.2.14 | No fix listed |
| chatelao php address book | = 3.3 | No fix listed |
| chatelao php address book | = 3.3.1 | No fix listed |
| chatelao php address book | = 3.3.2 | No fix listed |
| chatelao php address book | = 3.3.3 | No fix listed |
| chatelao php address book | = 3.3.4 | No fix listed |
| chatelao php address book | = 3.3.5 | No fix listed |
| chatelao php address book | = 3.3.6 | No fix listed |
| chatelao php address book | = 3.3.7 | No fix listed |
| chatelao php address book | = 3.3.8 | No fix listed |
| chatelao php address book | = 3.3.9 | No fix listed |
| chatelao php address book | = 3.3.10 | No fix listed |
| chatelao php address book | = 3.3.12 | No fix listed |
| chatelao php address book | = 3.3.13 | No fix listed |
| chatelao php address book | = 3.3.14 | No fix listed |
| chatelao php address book | = 3.3.15 | No fix listed |
| chatelao php address book | = 3.3.16 | No fix listed |
| chatelao php address book | = 3.3.17 | No fix listed |
| chatelao php address book | = 3.3.18 | No fix listed |
| chatelao php address book | = 3.4 | No fix listed |
| chatelao php address book | = 3.4.1 | No fix listed |
| chatelao php address book | = 3.4.2 | No fix listed |
| chatelao php address book | = 3.4.3 | No fix listed |
| chatelao php address book | = 3.4.4 | No fix listed |
| chatelao php address book | = 3.4.5 | No fix listed |
| chatelao php address book | = 3.4.6 | No fix listed |
| chatelao php address book | = 3.4.7 | No fix listed |
| chatelao php address book | = 3.4.8 | No fix listed |
| chatelao php address book | = 3.4.9 | No fix listed |
| chatelao php address book | = 4.0 | No fix listed |
| chatelao php address book | = 4.0.2 | No fix listed |
| chatelao php address book | = 4.1.1 | No fix listed |
| chatelao php address book | = 4.1.3 | No fix listed |
| chatelao php address book | = 4.1.4 | No fix listed |
| chatelao php address book | = 5.0 | No fix listed |
| chatelao php address book | = 5.0-beta | No fix listed |
| chatelao php address book | = 5.1 | No fix listed |
| chatelao php address book | = 5.2 | No fix listed |
| chatelao php address book | = 5.3 | No fix listed |
| chatelao php address book | = 5.4 | No fix listed |
| chatelao php address book | = 5.4.1 | No fix listed |
| chatelao php address book | = 5.4.2 | No fix listed |
| chatelao php address book | = 5.4.3 | No fix listed |
| chatelao php address book | = 5.4.4 | No fix listed |
| chatelao php address book | = 5.4.5 | No fix listed |
| chatelao php address book | = 5.4.6 | No fix listed |
| chatelao php address book | = 5.4.7 | No fix listed |
| chatelao php address book | = 5.4.9 | No fix listed |
| chatelao php address book | = 5.5 | No fix listed |
| chatelao php address book | = 5.6 | No fix listed |
| chatelao php address book | = 5.7 | No fix listed |
| chatelao php address book | = 5.7.1 | No fix listed |
| chatelao php address book | = 5.7.2 | No fix listed |
| chatelao php address book | = 5.7.3 | No fix listed |
| chatelao php address book | = 5.7.4 | No fix listed |
| chatelao php address book | = 5.7.5 | No fix listed |
| chatelao php address book | = 5.8.1 | No fix listed |
| chatelao php address book | = 6.0 | No fix listed |
| chatelao php address book | = 6.1 | No fix listed |
| chatelao php address book | = 6.1.1 | No fix listed |
| chatelao php address book | = 6.1.2 | No fix listed |
| chatelao php address book | = 6.1.3 | No fix listed |
| chatelao php address book | = 6.1.4 | No fix listed |
| chatelao php address book | = 6.2 | No fix listed |
| chatelao php address book | = 6.2.1 | No fix listed |
| chatelao php address book | = 6.2.2 | No fix listed |
| chatelao php address book | = 6.2.3 | No fix listed |
| chatelao php address book | = 6.2.4 | No fix listed |
| chatelao php address book | = 6.2.5 | No fix listed |
| chatelao php address book | = 6.2.6 | No fix listed |
| chatelao php address book | = 6.2.7 | No fix listed |
| chatelao php address book | = 6.2.9 | No fix listed |
| chatelao php address book | = 6.2.10 | No fix listed |
| chatelao php address book | = 6.2.11 | No fix listed |
| chatelao php address book | = 6.2.12 | No fix listed |
References
- 42781 third-party-advisory vendor-advisory
- 49212 third-party-advisory vendor-advisory
- sourceforge.net
- sourceforge.net
- sourceforge.net
- www.darksecurity.de exploit
- www.darksecurity.de exploit
- 18578 exploit
- 52396 exploit vdb-entry
- 53598 exploit vdb-entry
- phpaddressbook-multiple-xss(73944) vdb-entry