Phpabook Project - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2022-06-02.

Products

• Phpabook - 2 CVEs

Newest CVEs of Phpabook Project

• CVE-2022-30352 - CVSS 9.8 (critical), 2022-06-02: phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "auth_user" parameter in index.php script.
• CVE-2020-8510 - CVSS 9.8 (critical), 2020-02-03: An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en (user+perms+lang), one can…