Sql injection

2007-06-0101:30:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.848 High

EPSS

Percentile

98.5%

JSON

SQL injection vulnerability in getnewsitem.php in gCards 1.46 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter.

CPENameOperatorVersion
gcardseq1.43
gcardseq1.45
gcardseq1.44
gcardsle1.46
gcardseq1.13

Name	Operator	Version
gcards	eq	1.43
gcards	eq	1.45
gcards	eq	1.44
gcards	le	1.46
gcards	eq	1.13

References

osvdb.org/36317

secunia.com/advisories/25452

www.securityfocus.com/bid/24175

www.vupen.com/english/advisories/2007/1961

exchange.xforce.ibmcloud.com/vulnerabilities/34529

exchange.xforce.ibmcloud.com/vulnerabilities/41927

marc.info/?l=bugtraq&m=120880332905213&w=2

marc.info/?l=bugtraq&m=120881500629066&w=2

www.exploit-db.com/exploits/3988