Summary
This host is running PHP Address Book and is prone to SQL Injection vulnerability.
Impact
Successful exploitation will let the attacker cause SQL Injection attack, gain sensitive information about the database used by the web application.
Impact Level: Application
Solution
Upgrade to PHP Address Book version 5.7.2 or later, For updates refer to http://sourceforge.net/projects/php-addressbook/
Insight
The flaw is due to improper sanitization of user supplied input passed to the 'id' parameter in view.php, edit.php, and delete.php, and to the 'alphabet' parameter in index.php before being used in SQL queries.
Affected
PHP Address Book version 4.0.x
References
Updated on 2017-03-28
Severity
Classification
-
CVE CVE-2009-2608 -
CVSS Base Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
Related Vulnerabilities