https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2013-1749.htmlhttps://patchthecve.com/cve/CVE-2013-1749.htmlTue, 16 Jun 2026 23:52:03 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in edit.php in PHP Address Book 8.2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via the Address field.https://patchthecve.com/cve/CVE-2013-1748.htmlhttps://patchthecve.com/cve/CVE-2013-1748.htmlTue, 16 Jun 2026 23:52:03 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) edit.php or (2) import.php. NOTE: the view.php id vector is already covered by CVE-2008-2565.1 and the edit.php id vector is already covered byhttps://patchthecve.com/cve/CVE-2013-2778.htmlhttps://patchthecve.com/cve/CVE-2013-2778.htmlTue, 16 Jun 2026 23:53:57 +0000HIGH 7.5: Cross-site request forgery (CSRF) vulnerability in addressbook/register/delete_user.php in PHP Address Book 8.2.5 allows remote attackers to hijack the authentication of administrators for requests that delete accounts, a different vulnerability than CVE-2013-0135.1.https://patchthecve.com/cve/CVE-2013-0135.htmlhttps://patchthecve.com/cve/CVE-2013-0135.htmlTue, 16 Jun 2026 23:48:49 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) addressbook/register/delete_user.php, (2) addressbook/register/edit_user.php, or (3) addressbook/register/edit_user_save.php; the email parameter to (https://patchthecve.com/cve/CVE-2012-1912.htmlhttps://patchthecve.com/cve/CVE-2012-1912.htmlTue, 16 Jun 2026 23:40:32 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter. NOTE: the index.php vector is already covered by CVE-2008-2566.https://patchthecve.com/cve/CVE-2012-1911.htmlhttps://patchthecve.com/cve/CVE-2012-1911.htmlTue, 16 Jun 2026 23:40:32 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) to_group parameter to group.php or (2) id parameter to vcard.php. NOTE: the edit.php vector is already covered by CVE-2008-2565.