https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T18:46:38.149358+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-37083 CVE-2020-37083 — addressbook 9.0.0.1 - 'id' SQL Injection 2026-10-16T18:46:38.164569+00:00

Affected: chatelao PHP Address Book

PHP AddressBook 9.0.0.1 contains a time-based blind SQL injection vulnerability that allows remote attackers to manipulate database queries through the 'id' parameter. Attackers can inject crafted SQL statements with time delays to extract information by observing response times in the photo.php endpoint.