CVEvulnerability

CVE-2007-1121

6.4 MEDIUM Published 2007-02-27 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-02-27
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N

Description

Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) 1.00 allow remote attackers to execute arbitrary SQL commands via the id parameter to the (1) updateRow and (2) deleteRow functions in functions.php. NOTE: some of these details are obtained from third party information.

Affected configurations

• zephyrsoft toolbox address book continued 1.00 • zephyrsoft toolbox address book continued 1.01

References

http://secunia.com/advisories/24269 Patch, Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=488406 Patch
http://www.securityfocus.com/bid/22685 Vendor Advisory
http://www.vupen.com/english/advisories/2007/0715 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/32665 exchange.xforce.ibmcloud.com
http://secunia.com/advisories/24269 Patch, Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=488406 Patch
http://www.securityfocus.com/bid/22685 Vendor Advisory
http://www.vupen.com/english/advisories/2007/0715 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/32665 exchange.xforce.ibmcloud.com