Vulnerabilities > CVE-2006-4056 - SQL Injection vulnerability in The Address Book Login Page

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
the-address-book
the-address-book-reloaded
NVD
Published: 2006-08-10
Updated: 2017-07-20

Summary

Multiple SQL injection vulnerabilities in the authentication process in katzlbt (a) The Address Book 1.04e and earlier and (b) The Address Book Reloaded before 2.0-rc4 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters. NOTE: portions of these details are obtained from third party information.

Vulnerable Configurations

Part Description Count
Application
The_Address_Book
1
Application
The_Address_Book_Reloaded
1

References