critical9.8
CVE-2022-30352
phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "auth_user" parameter in index.php script.
Impact
phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "auth_user" parameter in index.php script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpabook Project | Phpabook | Version 0.9i |