Phpabook (Phpabook Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2022-06-02. Vendor: Phpabook Project.

CVEs of Phpabook

• CVE-2022-30352 - CVSS 9.8 (critical), 2022-06-02: phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "auth_user" parameter in index.php script.
• CVE-2020-8510 - CVSS 9.8 (critical), 2020-02-03: An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en (user+perms+lang), one can…