• info
• discussion
• exploit
• solution
• references

PhxContacts Multiple SQL Injection Vulnerabilities



These issues can be exploited through a web client.

Example URI have been provided:

http://www.example.com/carnet.php?view_cat=&all_lines=true&motclef=[sql]
http://www.example.com/carnet.php?view_cat=2&nbr_line_view=[sql]
http://www.example.com/contact_view.php?id_contact=[sql]