Exploitation Summary
EIP tracks 2 public exploits for CVE-2006-1536. PoCs published by Morocco Security Team.
AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in PhxContacts 0.93.1 and prior, but does not include actual exploit code. It outlines the vulnerability and potential impact without technical implementation details.
Description
Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to execute arbitrary SQL commands via the (1) motclef and (2) nbr_line_view parameters in (a) carnet.php, and the (3) id_contact parameter in (b) contact_view.php.
Exploits (2)
The provided text describes SQL injection vulnerabilities in PhxContacts 0.93.1 and prior, but does not include actual exploit code. It outlines the vulnerability and potential impact without technical implementation details.
The provided text describes SQL injection vulnerabilities in PhxContacts 0.93.1 and prior, detailing vulnerable parameters in the 'carnet.php' script. It includes example URLs demonstrating the injection points but lacks executable exploit code.