CVEvulnerability
CVE-2008-2566
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-06-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the group parameter to (1) index.php or (2) the default URI.
Affected configurations
• php-address book php-address book (<= 3.1.5)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.com/files/129789/PHP-Address-Book-Cross-Site-Scripting-SQL-Injection.html Exploit
- http://secunia.com/advisories/30540 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42856 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99624 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5739 www.exploit-db.com
- http://packetstormsecurity.com/files/129789/PHP-Address-Book-Cross-Site-Scripting-SQL-Injection.html Exploit
- http://secunia.com/advisories/30540 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42856 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99624 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5739 www.exploit-db.com