Skip to content

CVE-2012-1912 Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter. NOTE: the index.p...

MediumCVSS 4.3 EPSS 2.4%
Published
Updated
Exploit status
No public exploit known

Description

Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter. NOTE: the index.php vector is already covered by CVE-2008-2566.

Affected products

ProductAffected versionsFixed in
chatelao php address book <= 7.0 No fix listed
chatelao php address book = 1.0 No fix listed
chatelao php address book = 1.2 No fix listed
chatelao php address book = 2.0 No fix listed
chatelao php address book = 2.1 No fix listed
chatelao php address book = 2.1.1 No fix listed
chatelao php address book = 2.2 No fix listed
chatelao php address book = 2.3 No fix listed
chatelao php address book = 2.4 No fix listed
chatelao php address book = 2.6 No fix listed
chatelao php address book = 3.0 No fix listed
chatelao php address book = 3.1 No fix listed
chatelao php address book = 3.1.1 No fix listed
chatelao php address book = 3.1.2 No fix listed
chatelao php address book = 3.1.3 No fix listed
chatelao php address book = 3.1.4 No fix listed
chatelao php address book = 3.1.5 No fix listed
chatelao php address book = 3.1.6 No fix listed
chatelao php address book = 3.2 No fix listed
chatelao php address book = 3.2.1 No fix listed
chatelao php address book = 3.2.2 No fix listed
chatelao php address book = 3.2.3 No fix listed
chatelao php address book = 3.2.4 No fix listed
chatelao php address book = 3.2.5 No fix listed
chatelao php address book = 3.2.6 No fix listed
Show 82 more
ProductAffected versionsFixed in
chatelao php address book = 3.2.7 No fix listed
chatelao php address book = 3.2.8 No fix listed
chatelao php address book = 3.2.9 No fix listed
chatelao php address book = 3.2.10 No fix listed
chatelao php address book = 3.2.11 No fix listed
chatelao php address book = 3.2.12 No fix listed
chatelao php address book = 3.2.13 No fix listed
chatelao php address book = 3.2.14 No fix listed
chatelao php address book = 3.3 No fix listed
chatelao php address book = 3.3.1 No fix listed
chatelao php address book = 3.3.2 No fix listed
chatelao php address book = 3.3.3 No fix listed
chatelao php address book = 3.3.4 No fix listed
chatelao php address book = 3.3.5 No fix listed
chatelao php address book = 3.3.6 No fix listed
chatelao php address book = 3.3.7 No fix listed
chatelao php address book = 3.3.8 No fix listed
chatelao php address book = 3.3.9 No fix listed
chatelao php address book = 3.3.10 No fix listed
chatelao php address book = 3.3.12 No fix listed
chatelao php address book = 3.3.13 No fix listed
chatelao php address book = 3.3.14 No fix listed
chatelao php address book = 3.3.15 No fix listed
chatelao php address book = 3.3.16 No fix listed
chatelao php address book = 3.3.17 No fix listed
chatelao php address book = 3.3.18 No fix listed
chatelao php address book = 3.4 No fix listed
chatelao php address book = 3.4.1 No fix listed
chatelao php address book = 3.4.2 No fix listed
chatelao php address book = 3.4.3 No fix listed
chatelao php address book = 3.4.4 No fix listed
chatelao php address book = 3.4.5 No fix listed
chatelao php address book = 3.4.6 No fix listed
chatelao php address book = 3.4.7 No fix listed
chatelao php address book = 3.4.8 No fix listed
chatelao php address book = 3.4.9 No fix listed
chatelao php address book = 4.0 No fix listed
chatelao php address book = 4.0.2 No fix listed
chatelao php address book = 4.1.1 No fix listed
chatelao php address book = 4.1.3 No fix listed
chatelao php address book = 4.1.4 No fix listed
chatelao php address book = 5.0 No fix listed
chatelao php address book = 5.0-beta No fix listed
chatelao php address book = 5.1 No fix listed
chatelao php address book = 5.2 No fix listed
chatelao php address book = 5.3 No fix listed
chatelao php address book = 5.4 No fix listed
chatelao php address book = 5.4.1 No fix listed
chatelao php address book = 5.4.2 No fix listed
chatelao php address book = 5.4.3 No fix listed
chatelao php address book = 5.4.4 No fix listed
chatelao php address book = 5.4.5 No fix listed
chatelao php address book = 5.4.6 No fix listed
chatelao php address book = 5.4.7 No fix listed
chatelao php address book = 5.4.9 No fix listed
chatelao php address book = 5.5 No fix listed
chatelao php address book = 5.6 No fix listed
chatelao php address book = 5.7 No fix listed
chatelao php address book = 5.7.1 No fix listed
chatelao php address book = 5.7.2 No fix listed
chatelao php address book = 5.7.3 No fix listed
chatelao php address book = 5.7.4 No fix listed
chatelao php address book = 5.7.5 No fix listed
chatelao php address book = 5.8.1 No fix listed
chatelao php address book = 6.0 No fix listed
chatelao php address book = 6.1 No fix listed
chatelao php address book = 6.1.1 No fix listed
chatelao php address book = 6.1.2 No fix listed
chatelao php address book = 6.1.3 No fix listed
chatelao php address book = 6.1.4 No fix listed
chatelao php address book = 6.2 No fix listed
chatelao php address book = 6.2.1 No fix listed
chatelao php address book = 6.2.2 No fix listed
chatelao php address book = 6.2.3 No fix listed
chatelao php address book = 6.2.4 No fix listed
chatelao php address book = 6.2.5 No fix listed
chatelao php address book = 6.2.6 No fix listed
chatelao php address book = 6.2.7 No fix listed
chatelao php address book = 6.2.9 No fix listed
chatelao php address book = 6.2.10 No fix listed
chatelao php address book = 6.2.11 No fix listed
chatelao php address book = 6.2.12 No fix listed

References