Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) to_group parameter to group.php or (2) id parameter to vcard.php. NOTE: the edit.php vector is already covered by CVE-2008-2565.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP Address Book 多个SQL注入漏洞
Vulnerability Description
PHP Address Book是一个用PHP开发，采用MySQL数据库的简单的、基于Web的地址簿、联系人管理软件。 PHP Address Book 6.2.12和较早版本中存在多个SQL注入漏洞。远程攻击者可利用该漏洞通过(1)传送到group.php脚本中的‘to_group’参数或(2)传送到vcard.php脚本中的‘id’参数，执行任意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A