CVE-2008-1492: Coronamatrix Phpaddressbook

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in CoronaMatrix phpAddressBook 2.11 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin parameter to (1) index.php and (2) install.php. NOTE: it was later reported that vector 1 is also present in 2.0.

Affected products

• Coronamatrix Phpaddressbook: version 2.11 only

Published 2008-03-25. Last modified 2026-06-16.