CVE-2007-1122

no score yetEPSS 15%

Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) 1.00 and 1.01 allow remote attackers to execute arbitrary SQL commands via the id parameter to the (1) updateRow and (2) deleteRow functions in functions.php, a variant of a SQL injection issue that was fixed in 1.01. NOTE: some of these details are obtained from third party information.

EPSS: 15% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
Published: 2007-02-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

zephyrsoft_toolbox:address_book_continued

References

http://secunia.com/advisories/24269
http://sourceforge.net/project/downloading.php?group_id=153333&use_mirror=osdn&filename=abc-1.02.zip
http://www.securityfocus.com/bid/22685
http://www.vupen.com/english/advisories/2007/0715
http://secunia.com/advisories/24269

Check your stack JSON