CVE-2006-1535: Phoetux.net Phxcontacts

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in login.php in Phoetux.net PhxContacts 0.93.1 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter.

Affected products

• Phoetux.net Phxcontacts: version 0.93 only; version 0.93.1 only

Published 2006-03-30. Last modified 2026-06-16.