EUVD-2008-4856

Malware in sbrugna...

EUVD-2008-4857

Malware in sbrugna...

WebCards <= 1.3 - Remote SQL Injection Vulnerability

No description provided by source. -+================================================================================+- -+ WebCards = 1.3 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz Contact:...

CVE-2008-4878

Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3 allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the uploaded file...

CVE-2008-4877

SQL injection vulnerability in admin.php in WebCards 1.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in admin.php in WebCards 1.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-4878

Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3 allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the uploaded file...

CVE-2008-4877

CVE-2008-4877 describes a SQL injection in WebCards 1.3, specifically in admin.php, exploitable when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to manipulate the underlying SQL via the user parameter, potentially causing arbitrary SQL execution. This is documented acr...

CVE-2008-4877

SQL injection vulnerability in admin.php in WebCards 1.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-4878

The CVE-2008-4878 entry concerns WebCards 1.3, specifically the Add Image Macro feature. The vulnerability is an unrestricted file upload that enables remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension and then requesting the uploaded fi...

CVE-2008-4878: Improper Input Validation

Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3 allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the uploaded file...

CVE-2008-4877: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin.php in WebCards 1.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: some of these details are obtained from third party information...

WebCards 1.3 - SQL Injection

WebCards 1.3 - SQL Injection -+================================================================================+- -+ WebCards = 1.3 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz Contact:...

WebCards 1.3 - SQL Injection

-+================================================================================+- -+ WebCards = 1.3 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz Contact: irc.rizon.net sectalk Discovered On: 2...

webcards-sql.txt

-+================================================================================+- -+ WebCards = 1.3 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz Contact: irc.rizon.net sectalk Discovered On: 2...