Cross-site Scripting Vulnerability in PHP Address Book by PHP
CVE-2012-1912

Currently unrated

Key Information:

Vendor

Chatelao

Status
PHP Address Book
Vendor
CVE Published:
9 September 2012

What is CVE-2012-1912?

A cross-site scripting vulnerability exists in preferences.php of the PHP Address Book, which allows remote attackers to inject arbitrary web scripts or HTML through the 'from' parameter. This can lead to the execution of malicious scripts in the context of the user's session, posing significant risks to data integrity and confidentiality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://secunia.com/advisories/42781
third-party-advisoryx_refsource_SECUNIA
http://www.exploit-db.com/exploits/18578
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/53598
vdb-entryx_refsource_BID

EPSS Score

8% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.