Sendcard SQL injection

The version of Sendcard installed on the remote host is prone to a SQL injection attack due to its failure to sanitize user-supplied input to the SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2006-1006: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in sendcard.php in sendcard before 3.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters...

[SA19061] MyBB "comma" Parameter SQL Injection Vulnerability

TITLE: sendcard Unspecified SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA19056 VERIFY ADVISORY: http://secunia.com/advisories/19056/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: sendcard 3.x http://secunia.com/product/5427/ DESCRIPTION: Sumit...

Sendcard sendcard.php id Parameter SQL Injection

The remote host is running Sendcard, a multi-database e-card program written in PHP. The version of Sendcard installed on the remote host is prone to a SQL injection attack due to its failure to sanitize user-supplied input to the 'id' field in the 'sendcard.php' script. %NASLMINLEVEL 70300 Josh...

CVE-2005-2404

SQL injection vulnerability in sendcard.php in Sendcard 3.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-2404

Sendcard 3.2.3 is affected: sendcard.php?id is vulnerable to SQL injection due to insufficient input sanitization. Remote attackers could execute arbitrary SQL commands, with CVSS base impact of Partial confidentiality, integrity, and availability (AV:N/AC:L/Au:N/C:P/I:P/A:P). This result is supp...

CVE-2005-2404

SQL injection vulnerability in sendcard.php in Sendcard 3.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-2404: Undefined Security Weakness

SQL injection vulnerability in sendcard.php in Sendcard 3.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

[SA16165] sendcard "id" SQL Injection Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CYBSEC - PHPMailer Infinite Loop Denial of Service

CYBSEC S.A. www.cybsec.com Advisory Name: PHPMailer Infinite Loop Denial of Service ============== Vulnerability Class: Denial of Service ==================== Release Date: 05.27.2005 ============= Affected Applications: ====================== PHPMailer = 1.72 Affected Platforms:...