CVE-2008-2565

Published: Jun 6, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.php and (2) edit.php. NOTE: it was later reported that 4.0.x is also affected.

Affected (29)

Products: Php Address Book: Php Address Book

Php Address Book

1 product

Php Address Book

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Php Address Book Php Address Book	Up to 4.0
Php Address Book Php Address Book	Version 1.0
Php Address Book Php Address Book	Version 1.2
Php Address Book Php Address Book	Version 2.0
Php Address Book Php Address Book	Version 2.1.1
Php Address Book Php Address Book	Version 2.1
Php Address Book Php Address Book	Version 2.2
Php Address Book Php Address Book	Version 2.3
Php Address Book Php Address Book	Version 2.4
Php Address Book Php Address Book	Version 2.6
Php Address Book Php Address Book	Version 3.0
Php Address Book Php Address Book	Version 3.1.1
Php Address Book Php Address Book	Version 3.1.2
Php Address Book Php Address Book	Version 3.1.3
Php Address Book Php Address Book	Version 3.1.4
Php Address Book Php Address Book	Version 3.1.5
Php Address Book Php Address Book	Version 3.1
Php Address Book Php Address Book	Version 3.3.16
Php Address Book Php Address Book	Version 3.3.17
Php Address Book Php Address Book	Version 3.3.18
Php Address Book Php Address Book	Version 3.4.1
Php Address Book Php Address Book	Version 3.4.2
Php Address Book Php Address Book	Version 3.4.3
Php Address Book Php Address Book	Version 3.4.4
Php Address Book Php Address Book	Version 3.4.5
Php Address Book Php Address Book	Version 3.4.6
Php Address Book Php Address Book	Version 3.4.7
Php Address Book Php Address Book	Version 3.4.8
Php Address Book Php Address Book	Version 3.4