medium6.1
CVE-2023-4492
Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters (firstname, homephone, lastname, middlename, workaddress, workcity, workcou…
Impact
Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters (firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate and workzip) of the /addrbook.ghp file, allowing an attacker to inject a JavaScript payload specially designed to run when the application is loaded
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Easy Address Book Web Server Project | Easy Address Book Web Server | Version 1.6 |