CVE-2013-1748 Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) edit.php or (2) import.php. NOTE: the view.p...
HighCVSS 7.5
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) edit.php or (2) import.php. NOTE: the view.php id vector is already covered by CVE-2008-2565.1 and the edit.php id vector is already covered by CVE-2008-2565.2.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chatelao php address book | = 8.2.5 | No fix listed |
References
- [oss-security] 20130417 Multiple vulnerabilities in PHP Address Book v8.2.5 exploit mailing-list
- [oss-security] 20130417 Re: Multiple vulnerabilities in PHP Address Book v8.2.5 exploit mailing-list