CVE-2006-1536

Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to execute arbitrary SQL commands via the 1 motclef and 2 nbrlineview parameters in a carnet.php, and the 3 idcontact parameter in b contactview.php...

CVE-2006-1535: Undefined Security Weakness

Cross-site scripting XSS vulnerability in login.php in Phoetux.net PhxContacts 0.93.1 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter...