| Package | Affected versions | Patched versions |
|---|---|---|
| php-address book | = 1.0= 1.2= 2.0= 2.1= 2.1.1= 2.2= 2.3= 2.4= 2.6= 3.0= 3.1= 3.1.1= 3.1.2= 3.1.3= 3.1.4= 3.1.5= 3.3.16= 3.3.17= 3.3.18= 3.4= 3.4.1= 3.4.2= 3.4.3= 3.4.4= 3.4.5= 3.4.6= 3.4.7= 3.4.8≤ 4.0 |
Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.php and (2) edit.php. NOTE: it was later reported that 4.0.x is also affected.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free