Out-of-date Version (Php Address Book)
Summary#
Invicti identified the target web site is using PHP Address Book and detected that it is out of date. PHP Address Book is an open source web-based address & phone book system.
Impact#
Since this is an old version of the software, it may be vulnerable to attacks.
Remediation#
Please upgrade your installation of PHP Address Book to the latest stable version.
Classifications#
Invicti Security Insights
- Sven Morgenroth Talks About PHP Object Injection Vulnerabilities on Paul’s Security Weekly Podcast
- End of Support for PHP 5 and PHP 7.0
- PHP Wrappers, Streams & Local File Intrusion (LFI)
- Sven Morgenroth Talks About PHP Type Juggling on Paul’s Security Weekly Podcast
- PHP Type Juggling Exploit: Vulnerability, Payloads, and Fixes