CVE-2012-2903 Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to group.php, or the (2) tar...
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to group.php, or the (2) target_language or (3) target_flag parameter to translate.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chatelao php address book | <= 6.1.1 | No fix listed |
| chatelao php address book | = 1.0 | No fix listed |
| chatelao php address book | = 1.2 | No fix listed |
| chatelao php address book | = 2.0 | No fix listed |
| chatelao php address book | = 2.1 | No fix listed |
| chatelao php address book | = 2.1.1 | No fix listed |
| chatelao php address book | = 2.2 | No fix listed |
| chatelao php address book | = 2.3 | No fix listed |
| chatelao php address book | = 2.4 | No fix listed |
| chatelao php address book | = 2.6 | No fix listed |
| chatelao php address book | = 3.0 | No fix listed |
| chatelao php address book | = 3.1 | No fix listed |
| chatelao php address book | = 3.1.1 | No fix listed |
| chatelao php address book | = 3.1.2 | No fix listed |
| chatelao php address book | = 3.1.3 | No fix listed |
| chatelao php address book | = 3.1.4 | No fix listed |
| chatelao php address book | = 3.1.5 | No fix listed |
| chatelao php address book | = 3.1.6 | No fix listed |
| chatelao php address book | = 3.2 | No fix listed |
| chatelao php address book | = 3.2.1 | No fix listed |
| chatelao php address book | = 3.2.2 | No fix listed |
| chatelao php address book | = 3.2.3 | No fix listed |
| chatelao php address book | = 3.2.4 | No fix listed |
| chatelao php address book | = 3.2.5 | No fix listed |
| chatelao php address book | = 3.2.6 | No fix listed |
Show 66 more
| Product | Affected versions | Fixed in |
|---|---|---|
| chatelao php address book | = 3.2.7 | No fix listed |
| chatelao php address book | = 3.2.8 | No fix listed |
| chatelao php address book | = 3.2.9 | No fix listed |
| chatelao php address book | = 3.2.10 | No fix listed |
| chatelao php address book | = 3.2.11 | No fix listed |
| chatelao php address book | = 3.2.12 | No fix listed |
| chatelao php address book | = 3.2.13 | No fix listed |
| chatelao php address book | = 3.2.14 | No fix listed |
| chatelao php address book | = 3.3 | No fix listed |
| chatelao php address book | = 3.3.1 | No fix listed |
| chatelao php address book | = 3.3.2 | No fix listed |
| chatelao php address book | = 3.3.3 | No fix listed |
| chatelao php address book | = 3.3.4 | No fix listed |
| chatelao php address book | = 3.3.5 | No fix listed |
| chatelao php address book | = 3.3.6 | No fix listed |
| chatelao php address book | = 3.3.7 | No fix listed |
| chatelao php address book | = 3.3.8 | No fix listed |
| chatelao php address book | = 3.3.9 | No fix listed |
| chatelao php address book | = 3.3.10 | No fix listed |
| chatelao php address book | = 3.3.12 | No fix listed |
| chatelao php address book | = 3.3.13 | No fix listed |
| chatelao php address book | = 3.3.14 | No fix listed |
| chatelao php address book | = 3.3.15 | No fix listed |
| chatelao php address book | = 3.3.16 | No fix listed |
| chatelao php address book | = 3.3.17 | No fix listed |
| chatelao php address book | = 3.3.18 | No fix listed |
| chatelao php address book | = 3.4 | No fix listed |
| chatelao php address book | = 3.4.1 | No fix listed |
| chatelao php address book | = 3.4.2 | No fix listed |
| chatelao php address book | = 3.4.3 | No fix listed |
| chatelao php address book | = 3.4.4 | No fix listed |
| chatelao php address book | = 3.4.5 | No fix listed |
| chatelao php address book | = 3.4.6 | No fix listed |
| chatelao php address book | = 3.4.7 | No fix listed |
| chatelao php address book | = 3.4.8 | No fix listed |
| chatelao php address book | = 3.4.9 | No fix listed |
| chatelao php address book | = 4.0 | No fix listed |
| chatelao php address book | = 4.0.2 | No fix listed |
| chatelao php address book | = 4.1.1 | No fix listed |
| chatelao php address book | = 4.1.3 | No fix listed |
| chatelao php address book | = 4.1.4 | No fix listed |
| chatelao php address book | = 5.0 | No fix listed |
| chatelao php address book | = 5.0-beta | No fix listed |
| chatelao php address book | = 5.1 | No fix listed |
| chatelao php address book | = 5.2 | No fix listed |
| chatelao php address book | = 5.3 | No fix listed |
| chatelao php address book | = 5.4 | No fix listed |
| chatelao php address book | = 5.4.1 | No fix listed |
| chatelao php address book | = 5.4.2 | No fix listed |
| chatelao php address book | = 5.4.3 | No fix listed |
| chatelao php address book | = 5.4.4 | No fix listed |
| chatelao php address book | = 5.4.5 | No fix listed |
| chatelao php address book | = 5.4.6 | No fix listed |
| chatelao php address book | = 5.4.7 | No fix listed |
| chatelao php address book | = 5.4.9 | No fix listed |
| chatelao php address book | = 5.5 | No fix listed |
| chatelao php address book | = 5.6 | No fix listed |
| chatelao php address book | = 5.7 | No fix listed |
| chatelao php address book | = 5.7.1 | No fix listed |
| chatelao php address book | = 5.7.2 | No fix listed |
| chatelao php address book | = 5.7.3 | No fix listed |
| chatelao php address book | = 5.7.4 | No fix listed |
| chatelao php address book | = 5.7.5 | No fix listed |
| chatelao php address book | = 5.8.1 | No fix listed |
| chatelao php address book | = 6.0 | No fix listed |
| chatelao php address book | = 6.1 | No fix listed |
References
- 49212 third-party-advisory vendor-advisory
- sourceforge.net exploit
- www.darksecurity.de exploit
- 53598 exploit vdb-entry
- phpaddressbook-multiplescripts-xss(75703) vdb-entry