PatchTheCVEthe address book vulnerabilities and fixes
Recent CVEs affecting the address book, with upgrade or downgrade steps. 9 tracked.
Also searched as: theaddressbook.
the address book has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2006-12-31. Highest priority: CVE-2006-4575 (score 52/100).
- CVE-2006-4582 MEDIUM 5.0 DOWNGRADE Cross-site request forgery (CSRF) vulnerability in The Address Book 1.04e allows remote attackers to perform u
- CVE-2006-4581 MEDIUM 5.0 DOWNGRADE Unrestricted file upload vulnerability in The Address Book 1.04e validates the Content-Type header but not the
- CVE-2006-4580 HIGH 7.5 DOWNGRADE register.php in The Address Book 1.04e allows remote attackers to bypass the "Allow User Self-Registration" se
- CVE-2006-4579 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in users.php in The Address Book 1.04e allows remote attackers to include ar
- CVE-2006-4578 HIGH 7.5 DOWNGRADE export.php in The Address Book 1.04e writes username and password hash information into a publicly accessible
- CVE-2006-4577 MEDIUM 6.8 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in The Address Book 1.04e allow remote attackers to inject
- CVE-2006-4576 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in The Address Book 1.04e allows remote attackers to inject arbitrary
- CVE-2006-4575 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary S
- CVE-2006-4056 HIGH 7.5 UPGRADE UPGRADE Multiple SQL injection vulnerabilities in the authentication process in katzlbt (a) The Address Book 1.04e and
FAQ
How do I fix the address book vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is the address book being exploited right now?
None of the tracked the address book CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which the address book CVE should I patch first?
CVE-2006-4575 currently ranks highest (52/100): Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary S.