CVE-2006-4872

The CVE-2006-4872 entry describes an SQL injection in Keyvan1 (Keyvan Janghorbani) ECardPro 2.0, exploitable via the keyword parameter in search.asp. The affected component is the search functionality (search.asp) and the underlying cause is an SQL injection allowing remote execution of arbitrary...