Back to Database
Status published
Medium
CVE-2012-2903
Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0...
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to group.php, or the (2) target_language or (3) target_flag parameter to translate.php.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-2903
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/bid/53598
- http://secunia.com/advisories/49212
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75703
- http://sourceforge.net/tracker/?func=detail&aid=3527242&group_id=157964&atid=805929
- http://www.darksecurity.de/index.php?/215-SSCHADV2012-013-PHP-Address-Book-7.0.0-Multiple-security-vulnerabilities.html
More from chatelao
View All →CVE-2020-37083
addressbook 9.0.0.1 - 'id' SQL Injection
High
8.8
CVE-2013-2778
Cross-site request forgery (CSRF) vulnerability in addressbook/register/delete_user.php in PHP Address...
High
7.5
CVE-2013-1749
Cross-site scripting (XSS) vulnerability in edit.php in PHP Address Book...
Medium
4.3
CVE-2013-1748
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow...
High
7.5
CVE-2013-0135
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow...
High
7.5
Affected Vendor
chatelao
View all reports →Affected Software
php address book
Vulnerable Versions:
0, 1.0, 1.2, 2.0, 2.1, 2.1.1, 2.2, 2.3, 2.4, 2.6, 3.0, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.2, 3.2.1, 3.2.2, 3.2.3, 3.2.4, 3.2.5, 3.2.6, 3.2.7, 3.2.8, 3.2.9, 3.2.10, 3.2.11, 3.2.12, 3.2.13, 3.2.14, 3.3, 3.3.1, 3.3.2, 3.3.3, 3.3.4, 3.3.5, 3.3.6, 3.3.7, 3.3.8, 3.3.9, 3.3.10, 3.3.12, 3.3.13, 3.3.14, 3.3.15, 3.3.16, 3.3.17, 3.3.18, 3.4, 3.4.1, 3.4.2, 3.4.3, 3.4.4, 3.4.5, 3.4.6, 3.4.7, 3.4.8, 3.4.9, 4.0, 4.0.2, 4.1.1, 4.1.3, 4.1.4, 5.0, 5.1, 5.2, 5.3, 5.4, 5.4.1, 5.4.2, 5.4.3, 5.4.4, 5.4.5, 5.4.6, 5.4.7, 5.4.9, 5.5, 5.6, 5.7, 5.7.1, 5.7.2, 5.7.3, 5.7.4, 5.7.5, 5.8.1, 6.0, 6.1
Timeline
Official Publish:
May 21st, 2012
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.