EUVD-2006-1539

Malware in sbrugna...

EUVD-2006-1540

Malware in sbrugna...

PhxContacts 0.93 Login.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17307/info PhxContacts is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

PhxContacts 0.93 carnet.php Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/17306/info PhxContacts is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploi...

PhxContacts 0.93 contact_view.php id_contact Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/17306/info PhxContacts is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploi...

PhxContactsSQL.txt

+PhxContacts +website of software:http://www.phoetux.net/ +founded by Morocco Security Team +special 10x to:all friends ww.lezr.com & www.cim-team.org +xss +http://target/login.php?m=xss +SQL +http://target/carnet.php?viewcat=&alllines=true&motclef=sql...

Sql injection

Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to execute arbitrary SQL commands via the 1 motclef and 2 nbrlineview parameters in a carnet.php, and the 3 idcontact parameter in b contactview.php...

Cross site scripting

Cross-site scripting XSS vulnerability in login.php in Phoetux.net PhxContacts 0.93.1 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter...

CVE-2006-1535

Cross-site scripting XSS vulnerability in login.php in Phoetux.net PhxContacts 0.93.1 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter...

CVE-2006-1536

Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to execute arbitrary SQL commands via the 1 motclef and 2 nbrlineview parameters in a carnet.php, and the 3 idcontact parameter in b contactview.php...

CVE-2006-1535

The CVE refers to a cross-site scripting (XSS) vulnerability in Phoetux.net PhxContacts (versions up to 0.93.1 beta) where an attacker can inject arbitrary script via the m parameter in login.php. Affected component is the login handling script; root cause is improper sanitization of input to the...

CVE-2006-1535

Cross-site scripting XSS vulnerability in login.php in Phoetux.net PhxContacts 0.93.1 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter...

CVE-2006-1536

Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to execute arbitrary SQL commands via the 1 motclef and 2 nbrlineview parameters in a carnet.php, and the 3 idcontact parameter in b contactview.php...

CVE-2006-1536

Affected product: Phoetux.net PhxContacts 0.93.1 beta and earlier. Vulnerability: multiple SQL injection flaws in PHP files carnet.php (parameters motclef, nbr_line_view) and contact_view.php (parameter id_contact) that allow remote attackers to execute arbitrary SQL commands. Root cause: input p...

CVE-2006-1536: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to execute arbitrary SQL commands via the 1 motclef and 2 nbrlineview parameters in a carnet.php, and the 3 idcontact parameter in b contactview.php...

CVE-2006-1535: Undefined Security Weakness

Cross-site scripting XSS vulnerability in login.php in Phoetux.net PhxContacts 0.93.1 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter...

PhxContacts <= 0.93.1 beta Multiple SQL injection & xss

+PhxContacts +website of software:http://www.phoetux.net/ +founded by Morocco Security Team +special 10x to:all friends ww.lezr.com & www.cim-team.org +xss +http://target/login.php?m=xss +SQL +http://target/carnet.php?viewcat=&alllines=true&motclef=sql...

PhxContacts 0.93 - 'carnet.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/17306/info PhxContacts is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

PhxContacts 0.93 - 'login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17307/info PhxContacts is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser ...

PhxContacts 0.93 - 'contact_view.php?id_contact' SQL Injection

source: https://www.securityfocus.com/bid/17306/info PhxContacts is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...