high7.5Public exploit code
CVE-2006-1536
Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to execute arbitrary SQL commands via the (1) …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PhxContacts 0.93 - 'contact_view.php?id_contact' SQL Injection2006-03-29 · webapps · php · Verified
- PhxContacts 0.93 - 'carnet.php' Multiple SQL Injections2006-03-29 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to execute arbitrary SQL commands via the (1) motclef and (2) nbr_line_view parameters in (a) carnet.php, and the (3) id_contact parameter in (b) contact_view.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phoetux.Net | Phxcontacts | Versions 0.93, 0.93.1 |