Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[SA19435] VNews Multiple Vulnerabilities

[SA19448] VBook Multiple Vulnerabilities

[Full-disclosure] EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability.

[Full-disclosure] ExplorerXP : Directory Traversal and Cross Site Scripting

From:	dabdoub-mosikar_(at)_moroccan-security.com <dabdoub-mosikar_(at)_moroccan-security.com>
Date:	30.03.2006
Subject:	PhxContacts <= 0.93.1 beta Multiple SQL injection & xss

[+]PhxContacts
[+]website of software:http://www.phoetux.net/
[+]founded by Morocco Security Team
[+]special 10x to:all friends ww.lezr.com & www.cim-team.org
[+]xss
[+]http://[target]/login.php?m=[xss]
[+]SQL
[+]http://[target]/carnet.php?view_cat=&all_lines=true&motclef=[sql]
[+]http://[target]carnet.php?view_cat=2&nbr_line_view=[sql]
[+]http://[target]/contact_view.php?id_contact=[sql]
[+]have nice day