VULNERABILITY INTELLIGENCE

CVE-2008-7180

CVSS score5 MEDIUM

EPSS probability1.62%

CISA KEVNot currently listed

Published2009-09-08

Last modified2026-06-16

CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

del_query1.php in Telephone Directory 2008 allows remote attackers to delete arbitrary contacts via a direct request with a modified id variable.