VIR Vulnerability Intelligence Relay

CVE-2012-1911

high
Published 2012-09-09 · Modified 2026-04-29
CVSS v3
—
CVSS v2
7.5
VIR risk
7.5

Description

Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) to_group parameter to group.php or (2) id parameter to vcard.php. NOTE: the edit.php vector is already covered by CVE-2008-2565.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Application impact
VendorProductVersionsFixed
chatelaophp_address_book{"endIncluding":"6.2.11"}
chatelaophp_address_book1.0
chatelaophp_address_book1.2
chatelaophp_address_book2.0
chatelaophp_address_book2.1
chatelaophp_address_book2.1.1
chatelaophp_address_book2.2
chatelaophp_address_book2.3
chatelaophp_address_book2.4
chatelaophp_address_book2.6
chatelaophp_address_book3.0
chatelaophp_address_book3.1
chatelaophp_address_book3.1.1
chatelaophp_address_book3.1.2
chatelaophp_address_book3.1.3
chatelaophp_address_book3.1.4
chatelaophp_address_book3.1.5
chatelaophp_address_book3.1.6
chatelaophp_address_book3.2
chatelaophp_address_book3.2.1
chatelaophp_address_book3.2.2
chatelaophp_address_book3.2.3
chatelaophp_address_book3.2.4
chatelaophp_address_book3.2.5
chatelaophp_address_book3.2.6
chatelaophp_address_book3.2.7
chatelaophp_address_book3.2.8
chatelaophp_address_book3.2.9
chatelaophp_address_book3.2.10
chatelaophp_address_book3.2.11
chatelaophp_address_book3.2.12
chatelaophp_address_book3.2.13
chatelaophp_address_book3.2.14
chatelaophp_address_book3.3
chatelaophp_address_book3.3.1
chatelaophp_address_book3.3.2
chatelaophp_address_book3.3.3
chatelaophp_address_book3.3.4
chatelaophp_address_book3.3.5
chatelaophp_address_book3.3.6
chatelaophp_address_book3.3.7
chatelaophp_address_book3.3.8
chatelaophp_address_book3.3.9
chatelaophp_address_book3.3.10
chatelaophp_address_book3.3.12
chatelaophp_address_book3.3.13
chatelaophp_address_book3.3.14
chatelaophp_address_book3.3.15
chatelaophp_address_book3.3.16
chatelaophp_address_book3.3.17
chatelaophp_address_book3.3.18
chatelaophp_address_book3.4
chatelaophp_address_book3.4.1
chatelaophp_address_book3.4.2
chatelaophp_address_book3.4.3
chatelaophp_address_book3.4.4
chatelaophp_address_book3.4.5
chatelaophp_address_book3.4.6
chatelaophp_address_book3.4.7
chatelaophp_address_book3.4.8
chatelaophp_address_book3.4.9
chatelaophp_address_book4.0
chatelaophp_address_book4.0.2
chatelaophp_address_book4.1.1
chatelaophp_address_book4.1.3
chatelaophp_address_book4.1.4
chatelaophp_address_book5.0
chatelaophp_address_book5.1
chatelaophp_address_book5.2
chatelaophp_address_book5.3
chatelaophp_address_book5.4
chatelaophp_address_book5.4.1
chatelaophp_address_book5.4.2
chatelaophp_address_book5.4.3
chatelaophp_address_book5.4.4
chatelaophp_address_book5.4.5
chatelaophp_address_book5.4.6
chatelaophp_address_book5.4.7
chatelaophp_address_book5.4.9
chatelaophp_address_book5.5
chatelaophp_address_book5.6
chatelaophp_address_book5.7
chatelaophp_address_book5.7.1
chatelaophp_address_book5.7.2
chatelaophp_address_book5.7.3
chatelaophp_address_book5.7.4
chatelaophp_address_book5.7.5
chatelaophp_address_book5.8.1
chatelaophp_address_book6.0
chatelaophp_address_book6.1
chatelaophp_address_book6.1.1
chatelaophp_address_book6.1.2
chatelaophp_address_book6.1.3
chatelaophp_address_book6.1.4
chatelaophp_address_book6.2
chatelaophp_address_book6.2.1
chatelaophp_address_book6.2.2
chatelaophp_address_book6.2.3
chatelaophp_address_book6.2.4
chatelaophp_address_book6.2.5
chatelaophp_address_book6.2.6
chatelaophp_address_book6.2.7
chatelaophp_address_book6.2.9
chatelaophp_address_book6.2.10

References

CWEs

CWE-89

Verify integrity in audit chain (admin only). AS-IS.