Design/Logic Flaw

SendCard 3.3.0 allows remote attackers to obtain sensitive information via an invalid sclanguage parameter to sendcard.php, which reveals the path in an error message...

CVE-2007-3059

The CVE-2007-3059 entry concerns SendCard 3.3.0 where a flaw in the sc_language parameter passed to sendcard.php allows remote attackers to trigger an error message that reveals the server path. Affected software: SendCard 3.3.0 (component: sendcard.php handling of sc_language). Root cause: error...

CVE-2007-3059

SendCard 3.3.0 allows remote attackers to obtain sensitive information via an invalid sclanguage parameter to sendcard.php, which reveals the path in an error message...

Full Path Disclosure in SendCard

Hello Vulnerable : SendCard Version : 3.3.0 Web : http://www.sendcard.org Exploit : http://example.com/sendcard/sendcard.php?sclanguage='Anything' -------------------- Discovered By LinuxDrox www.LeZr.Com Best Regards ,,,...

[SA19061] MyBB "comma" Parameter SQL Injection Vulnerability

TITLE: sendcard Unspecified SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA19056 VERIFY ADVISORY: http://secunia.com/advisories/19056/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: sendcard 3.x http://secunia.com/product/5427/ DESCRIPTION: Sumit...

CVE-2005-4314

Cross-site scripting XSS vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 stop and 2 user parameters...

PT-2004-1773 · Kde · Kde

Name of the Vulnerable Software and Affected Versions: KDE versions prior to 3.3.0 Description: The issue arises from improper handling of certain symbolic links that point to 'stale' locations. This could allow local users to create or truncate arbitrary files. Recommendations: For versions prio...