CVEvulnerability
CVE-2006-4575
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary SQL commands via the (1) lastname, (2) firstname, (3) passwordOld, (4) passwordNew, (5) id, (6) language, (7) defaultLetter, (8) newuserPass, (9) newuserType, (10) newuserEmail parameters in (a) user.php; the (11) goTo and (12) search parameters in (b) search.php; and the (13) groupAddName parameter in (c) save.php.
Affected configurations
• the address book the address book 1.04e
References
- http://osvdb.org/32568 osvdb.org
- http://osvdb.org/32569 osvdb.org
- http://osvdb.org/32570 osvdb.org
- http://secunia.com/advisories/21694 secunia.com
- http://secunia.com/secunia_research/2006-76/advisory/ Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/21870 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31238 exchange.xforce.ibmcloud.com
- http://osvdb.org/32568 osvdb.org
- http://osvdb.org/32569 osvdb.org
- http://osvdb.org/32570 osvdb.org
- http://secunia.com/advisories/21694 secunia.com
- http://secunia.com/secunia_research/2006-76/advisory/ Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/21870 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31238 exchange.xforce.ibmcloud.com