Full Path Disclosure in SendCard

Hello Vulnerable : SendCard Version : 3.3.0 Web : http://www.sendcard.org Exploit : http://example.com/sendcard/sendcard.php?sclanguage='Anything' -------------------- Discovered By LinuxDrox www.LeZr.Com Best Regards ,,,...

sendcard-lfi.txt

Sendcard sendcard.php Sendcard Local File Inclusion Vulnerability Discovered: ettee Dork: "Powered by sendcard - an advanced PHP e-card program" -site:sendcard.org "powered by Sendcard" Bug: "// Get the template details if!isset$form || $form == '' $form = "form"; if!isset$des || $des == '' $des ...

CVE-2007-2472

Cross-site scripting XSS vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the form parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Directory traversal

Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitrary files via a full pathname in the form parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the form parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-2471

Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitrary files via a full pathname in the form parameter...

CVE-2007-2471

The CVE-2007-2471 entry describes a directory traversal vulnerability in Sendcard 3.4.1 and earlier, where sendcard.php allows remote attackers to read arbitrary files by supplying a full pathname in the form parameter. Affected software: Sendcard ≤ 3.4.1. Underlying cause: inadequate sanitizatio...

CVE-2007-2471

Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitrary files via a full pathname in the form parameter...

CVE-2007-2472

Cross-site scripting XSS vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the form parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-2472

CVE-2007-2472 is an XSS vulnerability in Sendcard 3.4.1 and earlier, affecting sendcard.php where the form parameter can be exploited to inject arbitrary script/HTML. The description notes the vulnerability details come from third-party sources with unknown provenance. Connected documents confirm...

CVE-2007-2472: Undefined Security Weakness

Cross-site scripting XSS vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the form parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-2471: Undefined Security Weakness

Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitrary files via a full pathname in the form parameter...

Sendcard (sendcard.php) Sendcard Local File Inclusion Vulnerability

Sendcard sendcard.php Sendcard Local File Inclusion Vulnerability Discovered: ettee Dork: "Powered by sendcard - an advanced PHP e-card program" -site:sendcard.org "powered by Sendcard" Bug: "// Get the template details if!isset$form || $form == '' $form = "form"; if!isset$des || $des == '' $des ...

Sendcard <= 3.4.1 (sendcard.php form) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Sendcard = 3.4.1 sendcard.php form Local File Inclusion Vulnerability ======================================================================== Sendcard sendcard.php...

Sendcard 3.4.1 - sendcard.php?form Local File Inclusion

Sendcard 3.4.1 - sendcard.php?form Local File Inclusion Sendcard sendcard.php Sendcard Local File Inclusion Vulnerability Discovered: ettee Dork: "Powered by sendcard - an advanced PHP e-card program" -site:sendcard.org "powered by Sendcard" Bug: "// Get the template details if!isset$form || $for...

Sendcard 3.4.1 - 'sendcard.php?form' Local File Inclusion

Sendcard sendcard.php Sendcard Local File Inclusion Vulnerability Discovered: ettee Dork: "Powered by sendcard - an advanced PHP e-card program" -site:sendcard.org "powered by Sendcard" Bug: "// Get the template details if!isset$form || $form == '' $form = "form"; if!isset$des || $des == '' $des ...

sendcard_340_xpl.txt

!/usr/bin/php -q -d shortopentag=on php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary local inclusion\n"; echo " works regardless of php.ini settings\n"; echo " and if you succeed ...

SendCard 3.4.0 - Unauthorized Administrative Access

SendCard 3.4.0 - Unauthorized Administrative Access !/usr/bin/php -q -d shortopentag=on php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary local inclusion\n"; echo " works regardles...

SendCard <= 3.4.0 Unauthorized Administrative Access Exploit

Exploit for unknown platform in category web applications ============================================================ SendCard php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary...

SendCard 3.4.0 - Unauthorized Administrative Access

!/usr/bin/php -q -d shortopentag=on php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary local inclusion\n"; echo " works regardless of php.ini settings\n"; echo " and if you succeed ...