Deskripsi CVE

Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter. NOTE: the index.php vector is already covered by CVE-2008-2566.

Informasi CVE

Kelemahan Terkait

CWE-ID	Nama Kelemahan	Sumber
CWE-79	Improper Neutralization of Input During Web Page Generation The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	4.3		AV:N/AC:M/Au:N/C:N/I:P/A:N	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Informasi eksploitasi

Exploit Database EDB-ID : 18578

Tanggal publikasi : 2012-03-09 23h00 +00:00
Penulis : Stefan Schurtz
Terverifikasi EDB : No

Produk yang Disebutkan

Konfigurasi 0

Chatelao>>Php_address_book >> Version Hingga (termasuk) 7.0

Chatelao>>Php_address_book >> Version 1.0

Chatelao>>Php_address_book >> Version 1.2

Chatelao>>Php_address_book >> Version 2.0

Chatelao>>Php_address_book >> Version 2.1

Chatelao>>Php_address_book >> Version 2.1.1

Chatelao>>Php_address_book >> Version 2.2

Chatelao>>Php_address_book >> Version 2.3

Chatelao>>Php_address_book >> Version 2.4

Chatelao>>Php_address_book >> Version 2.6

Chatelao>>Php_address_book >> Version 3.0

Chatelao>>Php_address_book >> Version 3.1

Chatelao>>Php_address_book >> Version 3.1.1

Chatelao>>Php_address_book >> Version 3.1.2

Chatelao>>Php_address_book >> Version 3.1.3

Chatelao>>Php_address_book >> Version 3.1.4

Chatelao>>Php_address_book >> Version 3.1.5

Chatelao>>Php_address_book >> Version 3.1.6

Chatelao>>Php_address_book >> Version 3.2

Chatelao>>Php_address_book >> Version 3.2.1

Chatelao>>Php_address_book >> Version 3.2.2

Chatelao>>Php_address_book >> Version 3.2.3

Chatelao>>Php_address_book >> Version 3.2.4

Chatelao>>Php_address_book >> Version 3.2.5

Chatelao>>Php_address_book >> Version 3.2.6

Chatelao>>Php_address_book >> Version 3.2.7

Chatelao>>Php_address_book >> Version 3.2.8

Chatelao>>Php_address_book >> Version 3.2.9

Chatelao>>Php_address_book >> Version 3.2.10

Chatelao>>Php_address_book >> Version 3.2.11

Chatelao>>Php_address_book >> Version 3.2.12

Chatelao>>Php_address_book >> Version 3.2.13

Chatelao>>Php_address_book >> Version 3.2.14

Chatelao>>Php_address_book >> Version 3.3

Chatelao>>Php_address_book >> Version 3.3.1

Chatelao>>Php_address_book >> Version 3.3.2

Chatelao>>Php_address_book >> Version 3.3.3

Chatelao>>Php_address_book >> Version 3.3.4

Chatelao>>Php_address_book >> Version 3.3.5

Chatelao>>Php_address_book >> Version 3.3.6

Chatelao>>Php_address_book >> Version 3.3.7

Chatelao>>Php_address_book >> Version 3.3.8

Chatelao>>Php_address_book >> Version 3.3.9

Chatelao>>Php_address_book >> Version 3.3.10

Chatelao>>Php_address_book >> Version 3.3.12

Chatelao>>Php_address_book >> Version 3.3.13

Chatelao>>Php_address_book >> Version 3.3.14

Chatelao>>Php_address_book >> Version 3.3.15

Chatelao>>Php_address_book >> Version 3.3.16

Chatelao>>Php_address_book >> Version 3.3.17

Chatelao>>Php_address_book >> Version 3.3.18

Chatelao>>Php_address_book >> Version 3.4

Chatelao>>Php_address_book >> Version 3.4.1

Chatelao>>Php_address_book >> Version 3.4.2

Chatelao>>Php_address_book >> Version 3.4.3

Chatelao>>Php_address_book >> Version 3.4.4

Chatelao>>Php_address_book >> Version 3.4.5

Chatelao>>Php_address_book >> Version 3.4.6

Chatelao>>Php_address_book >> Version 3.4.7

Chatelao>>Php_address_book >> Version 3.4.8

Chatelao>>Php_address_book >> Version 3.4.9

Chatelao>>Php_address_book >> Version 4.0

Chatelao>>Php_address_book >> Version 4.0.2

Chatelao>>Php_address_book >> Version 4.1.1

Chatelao>>Php_address_book >> Version 4.1.3

Chatelao>>Php_address_book >> Version 4.1.4

Chatelao>>Php_address_book >> Version 5.0

Chatelao>>Php_address_book >> Version 5.1

Chatelao>>Php_address_book >> Version 5.2

Chatelao>>Php_address_book >> Version 5.3

Chatelao>>Php_address_book >> Version 5.4

Chatelao>>Php_address_book >> Version 5.4.1

Chatelao>>Php_address_book >> Version 5.4.2

Chatelao>>Php_address_book >> Version 5.4.3

Chatelao>>Php_address_book >> Version 5.4.4

Chatelao>>Php_address_book >> Version 5.4.5

Chatelao>>Php_address_book >> Version 5.4.6

Chatelao>>Php_address_book >> Version 5.4.7

Chatelao>>Php_address_book >> Version 5.4.9

Chatelao>>Php_address_book >> Version 5.5

Chatelao>>Php_address_book >> Version 5.6

Chatelao>>Php_address_book >> Version 5.7

Chatelao>>Php_address_book >> Version 5.7.1

Chatelao>>Php_address_book >> Version 5.7.2

Chatelao>>Php_address_book >> Version 5.7.3

Chatelao>>Php_address_book >> Version 5.7.4

Chatelao>>Php_address_book >> Version 5.7.5

Chatelao>>Php_address_book >> Version 5.8.1

Chatelao>>Php_address_book >> Version 6.0

Chatelao>>Php_address_book >> Version 6.1

Chatelao>>Php_address_book >> Version 6.1.1

Chatelao>>Php_address_book >> Version 6.1.2

Chatelao>>Php_address_book >> Version 6.1.3

Chatelao>>Php_address_book >> Version 6.1.4

Chatelao>>Php_address_book >> Version 6.2

Chatelao>>Php_address_book >> Version 6.2.1

Chatelao>>Php_address_book >> Version 6.2.2

Chatelao>>Php_address_book >> Version 6.2.3

Chatelao>>Php_address_book >> Version 6.2.4

Chatelao>>Php_address_book >> Version 6.2.5

Chatelao>>Php_address_book >> Version 6.2.6

Chatelao>>Php_address_book >> Version 6.2.7

Chatelao>>Php_address_book >> Version 6.2.9

Chatelao>>Php_address_book >> Version 6.2.10

Chatelao>>Php_address_book >> Version 6.2.11

Chatelao>>Php_address_book >> Version 6.2.12

Referensi

http://secunia.com/advisories/42781
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.exploit-db.com/exploits/18578
Tags : exploit, x_refsource_EXPLOIT-DB

http://www.securityfocus.com/bid/53598
Tags : vdb-entry, x_refsource_BID

http://secunia.com/advisories/49212
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/bid/52396
Tags : vdb-entry, x_refsource_BID

http://sourceforge.net/tracker/?func=detail&aid=3501716&group_id=157964&atid=805929
Tags : x_refsource_MISC

http://sourceforge.net/tracker/?func=detail&aid=3496653&group_id=157964&atid=805929
Tags : x_refsource_MISC

http://www.darksecurity.de/advisories/2012/SSCHADV2012-007.txt
Tags : x_refsource_MISC

https://exchange.xforce.ibmcloud.com/vulnerabilities/73944
Tags : vdb-entry, x_refsource_XF

http://sourceforge.net/tracker/?func=detail&aid=3527242&group_id=157964&atid=805929
Tags : x_refsource_MISC

http://www.darksecurity.de/index.php?/215-SSCHADV2012-013-PHP-Address-Book-7.0.0-Multiple-security-vulnerabilities.html
Tags : x_refsource_MISC

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.96%	–	–
2022-03-27	–	–	1.96%	–	–
2022-04-03	–	–	1.96%	–	–
2022-08-28	–	–	1.96%	–	–
2023-03-12	–	–	–	0.54%	–
2023-09-10	–	–	–	0.54%	–
2024-02-11	–	–	–	0.54%	–
2024-06-02	–	–	–	0.54%	–
2024-07-07	–	–	–	0.54%	–
2024-08-04	–	–	–	0.54%	–
2024-08-11	–	–	–	0.54%	–
2024-09-29	–	–	–	0.55%	–
2024-12-22	–	–	–	0.6%	–
2025-01-19	–	–	–	0.6%	–
2025-01-19	–	–	–	0.6%	–
2025-03-18	–	–	–	–	8.91%
2026-03-29	–	–	–	–	12.57%
2026-05-17	–	–	–	–	11%

Tanggal	Persentil
2022-02-06	56%
2022-03-27	57%
2022-04-03	77%
2022-08-28	78%
2023-03-12	74%
2023-09-10	75%
2024-02-11	77%
2024-06-02	77%
2024-07-07	78%
2024-08-04	77%
2024-08-11	78%
2024-09-29	78%
2024-12-22	78%
2025-01-19	79%
2025-01-19	79%
2025-03-18	92%
2026-03-29	94%
2026-05-17	94%

CVE-2012-1912 : Detail

CVE-2012-1912