CVE-2006-1535

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-30 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in login.php in Phoetux.net PhxContacts 0.93.1 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter.

Affected products

Phoetux.Net Phxcontacts: 0.93, 0.93.1

References

http://www.securityfocus.com/archive/1/429259/100/0/threaded
http://www.securityfocus.com/bid/17307
http://www.securityfocus.com/archive/1/429259/100/0/threaded
http://www.securityfocus.com/bid/17307

Get alerted when CVE-2006-1535 or the next vulnerability affects your stack