Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) motclef and (2) nbr_line_view parameters in (a) carnet.php, and the (3) id_contact parameter in (b) contact_view.php.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
phoetux.net phxcontacts 0.93.1 |
||
phoetux.net phxcontacts 0.93 |