CVE-2006-1230

Multiple cross-site scripting XSS vulnerabilities in create.php in vCard 2.x allow remote attackers to inject arbitrary web script or HTML via the 1 cardid, 2 uploaded, 3 cardfontsize, or 4 cardcolor parameter. NOTE: the cardid vector was later reported to affect vCard 2.9, and the uploaded vecto...

CVE-2006-1230

Multiple cross-site scripting XSS vulnerabilities in create.php in vCard 2.x allow remote attackers to inject arbitrary web script or HTML via the 1 cardid, 2 uploaded, 3 cardfontsize, or 4 cardcolor parameter. NOTE: the cardid vector was later reported to affect vCard 2.9, and the uploaded vecto...

CVE-2006-1230

CVE-2006-1230 describes multiple cross-site scripting (XSS) flaws in create.php of vCard 2.x, allowing remote injection of arbitrary script/HTML via (1) card_id, (2) uploaded, (3) card_fontsize, or (4) card_color parameters. The note indicates the card_id vector was later reported to affect vCard...

XSS in vCard

Hello Vulnerable: vCard 2.x http://www.belchiorfoundry.com Exploit : http://example.com/vcard/create.php?cardid='scriptalertdocument.cookie/script http://example.com/vcard/create.php?uploaded='scriptalertdocument.cookie/script...

vCard2x.txt

Hello Vulnerable: vCard 2.x http://www.belchiorfoundry.com Exploit : http://example.com/vcard/create.php?cardid='alertdocument.cookie http://example.com/vcard/create.php?uploaded='alertdocument.cookie http://example.com/vcard/create.php?cardfontsize='alertdocument.cookie...

vCard 2.9 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/18122/info vCard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...

vCard 2.8/2.9 - 'create.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17073/info vCard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...

vCard 2.82.9 - create.php Multiple Cross-Site Scripting Vulnerabilities

vCard 2.82.9 - create.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17073/info vCard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...

vCard 2.9 - Multiple Cross-Site Scripting Vulnerabilities

vCard 2.9 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/18122/info vCard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

VCardLITE-2.4.txt

=========================================================== Title: Vcard Lite Remote Vulnerabilitie Vulnerability discovery: Disruptor Date: 11/02/2006 Severity: Remote Users Can Execute Arbitrary Code. Affected version: . ------------------------------------------------------------- Fix 1-Remove...

Ubuntu 4.10 / 5.04 : evolution vulnerabilities (USN-166-1)

Ulf Harnhammar disovered several format string vulnerabilities in Evolution. By tricking an user into viewing a specially crafted vCard attached to an email, specially crafted contact data from an LDAP server, specially crafted task lists from remote servers, or saving Calendar entries with this...

[SA18361] Joomla! vCard Email Address Disclosure and TinyMCE Compressor Vulnerabilities

TITLE: Joomla! vCard Email Address Disclosure and TinyMCE Compressor Vulnerabilities SECUNIA ADVISORY ID: SA18361 VERIFY ADVISORY: http://secunia.com/advisories/18361/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of sensitive information WHERE: From remote SOFTWARE: Joomla...

CVE-2006-0114

The vCard functions in Joomla! 1.0.5 use predictable sequential IDs for vcards and do not restrict access to them, which allows remote attackers to obtain valid e-mail addresses to conduct spam attacks by modifying the contactid parameter to index2.php...

Design/Logic Flaw

The vCard functions in Joomla! 1.0.5 use predictable sequential IDs for vcards and do not restrict access to them, which allows remote attackers to obtain valid e-mail addresses to conduct spam attacks by modifying the contactid parameter to index2.php...

CVE-2006-0114

The CVE-2006-0114 entry concerns Joomla! 1.0.5 vCard handling. The affected component is Joomla!’s vCard functionality, which uses predictable, sequential vCard IDs and does not restrict access, enabling remote attackers to discover valid e-mail addresses by altering the contact_id parameter to i...

CVE-2006-0114

The vCard functions in Joomla! 1.0.5 use predictable sequential IDs for vcards and do not restrict access to them, which allows remote attackers to obtain valid e-mail addresses to conduct spam attacks by modifying the contactid parameter to index2.php...

CVE-2005-4769

SQL injection vulnerability in addrbook.php in Belchior Foundry vCard PRO 3.1 allows remote attackers to execute arbitrary SQL commands via the addrid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

vCard define.inc.php match Parameter Remote File Inclusion

The remote host appears to be running vCard, a web-based electronic postcard application from Belchior Foundry and written in PHP. The version of vCard installed on the remote host fails to sanitize the 'match' parameter before using it in the 'admin/define.inc.php' script to read other files. By...

Belchior Foundry vCard Pro 3.1 - Addrbook.php SQL Injection

Belchior Foundry vCard Pro 3.1 - Addrbook.php SQL Injection source: https://www.securityfocus.com/bid/15254/info vCard PRO is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Belchior Foundry vCard Pro 3.1 - 'Addrbook.php' SQL Injection

source: https://www.securityfocus.com/bid/15254/info vCard PRO is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...