Export limit exceeded: 10159 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2008-1492

Multiple directory traversal vulnerabilities in CoronaMatrix phpAddressBook 2.11 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin parameter to (1) index.php and (2) install.php. NOTE: it was later reported that vector 1 is also present in 2.0.

CVSS 2.0 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Coronamatrix
Products
Phpaddressbook
CVE-2008-1847

SQL injection vulnerability in view.php in CoronaMatrix phpAddressBook 2.11 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Coronamatrix
Products
Phpaddressbook
CVE-2008-6646

Cross-site scripting (XSS) vulnerability in index.php in CoronaMatrix phpAddressBook 2.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter.

CVSS 2.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Coronamatrix
Products
Phpaddressbook
CVE-2008-7145

Multiple SQL injection vulnerabilities in index.php in CoronaMatrix phpAddressBook 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) parameters.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Coronamatrix
Products
Phpaddressbook