EUVD-2006-1539

Malware in sbrugna...

CVE-2006-1536

Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to execute arbitrary SQL commands via the 1 motclef and 2 nbrlineview parameters in a carnet.php, and the 3 idcontact parameter in b contactview.php...

CVE-2006-1535

Cross-site scripting XSS vulnerability in login.php in Phoetux.net PhxContacts 0.93.1 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter...

Sql injection

Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to execute arbitrary SQL commands via the 1 motclef and 2 nbrlineview parameters in a carnet.php, and the 3 idcontact parameter in b contactview.php...

Cross site scripting

Cross-site scripting XSS vulnerability in login.php in Phoetux.net PhxContacts 0.93.1 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter...

CVE-2006-1536

Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to execute arbitrary SQL commands via the 1 motclef and 2 nbrlineview parameters in a carnet.php, and the 3 idcontact parameter in b contactview.php...

CVE-2006-1536

Affected product: Phoetux.net PhxContacts 0.93.1 beta and earlier. Vulnerability: multiple SQL injection flaws in PHP files carnet.php (parameters motclef, nbr_line_view) and contact_view.php (parameter id_contact) that allow remote attackers to execute arbitrary SQL commands. Root cause: input p...

CVE-2006-1535

The CVE refers to a cross-site scripting (XSS) vulnerability in Phoetux.net PhxContacts (versions up to 0.93.1 beta) where an attacker can inject arbitrary script via the m parameter in login.php. Affected component is the login handling script; root cause is improper sanitization of input to the...