CVE-2008-7180

Description

del_query1.php in Telephone Directory 2008 allows remote attackers to delete arbitrary contacts via a direct request with a modified id variable.

Affected Platforms

Weakness Type

CWE-20

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/42973
• https://www.exploit-db.com/exploits/5769
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42973
• https://www.exploit-db.com/exploits/5769