The Address Book

9 CVEs across 1 The Address Book products. Browse The Address Book vulnerabilities, severities, and proof-of-concept exploits.

The Address Book products with known CVEs

ProductCVEs
The Address Book9
The Address Book CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2006-45822006-12-31Cross-site request forgery (CSRF) vulnerability in The Address Book 1.04e allows remote attackers to perform unauthorized actions as other users via unspecifie…
CVE-2006-45812006-12-31Unrestricted file upload vulnerability in The Address Book 1.04e validates the Content-Type header but not the file extension, which allows remote attackers to…
CVE-2006-45802006-12-31register.php in The Address Book 1.04e allows remote attackers to bypass the "Allow User Self-Registration" setting and create arbitrary users by setting the m…
CVE-2006-45792006-12-31Directory traversal vulnerability in users.php in The Address Book 1.04e allows remote attackers to include arbitrary files via a .. (dot dot) in the language…
CVE-2006-45782006-12-31export.php in The Address Book 1.04e writes username and password hash information into a publicly accessible file when dumping the MySQL database contents, wh…
CVE-2006-45772006-12-31Multiple cross-site scripting (XSS) vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or HTML via Javascript even…
CVE-2006-45762006-12-31Cross-site scripting (XSS) vulnerability in The Address Book 1.04e allows remote attackers to inject arbitrary web script or HTML by uploading the HTML file wi…
CVE-2006-45752006-12-31Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary SQL commands via the (1) lastname, (2) firstname…
CVE-2006-40562006-08-10Multiple SQL injection vulnerabilities in the authentication process in katzlbt (a) The Address Book 1.04e and earlier and (b) The Address Book Reloaded before…