eCardMAX 10.5 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: eCardMAX 10.5 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage : https://www.ecardmax.com/ Software Link: https://www.ecardmax.com/home/ecardmax/ Demo: https://ecardmax.com/ecardmaxdemo/ Version: 10.5 Category: Webapps...

eCardMAX 10.5 - SQL Injection

Exploit Title: eCardMAX 10.5 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage : https://www.ecardmax.com/ Software Link: https://www.ecardmax.com/home/ecardmax/ Demo: https://ecardmax.com/ecardmaxdemo/ Version: 10.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit...

eCardMAX 10.5 - Multiple Vulnerabilities

Exploit for php platform in category web applications eCardMAX 10.5 SQL Injection and XSS Vulnerabilities Software - eCardMAX 10.5 Vendor - eCardMAX.COM - http://www.ecardmax.com/ Vendor Product Description - eCardMax is the most trusted, powerful and dynamic online ecard software solution. It...

eCardMAX 10.5 - Multiple Vulnerabilities

eCardMAX 10.5 - Multiple Vulnerabilities Advisory ID: ZSL-2016-5336 Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5336.php eCardMAX 10.5 SQL Injection and XSS Vulnerabilities Software - eCardMAX 10.5 Vendor - eCardMAX.COM - http://www.ecardmax.com/ Vendor Product Description...

eCardMAX 10.5 - Multiple Vulnerabilities

Advisory ID: ZSL-2016-5336 Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5336.php eCardMAX 10.5 SQL Injection and XSS Vulnerabilities Software - eCardMAX 10.5 Vendor - eCardMAX.COM - http://www.ecardmax.com/ Vendor Product Description - eCardMax is the most trusted, powerful...

eCardMAX 10.5 Cross Site Scripting / SQL Injection

eCardMAX 10.5 SQL Injection and XSS Vulnerabilities Software - eCardMAX 10.5 Vendor - eCardMAX.COM - http://www.ecardmax.com/ Vendor Product Description - eCardMax is the most trusted, powerful and dynamic online ecard software solution. It enables you to create your own ecard website with many o...

eCardMAX 10.5 Multiple Vulnerabilities

Summary eCardMax is the most trusted, powerful and dynamic online ecard software solution. It enables you to create your own ecard website with many of the advanced features found on other major sites. Starting your own ecard website with eCardMax is fast and easy. Description eCardMAX suffers fr...

eCardMAX - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43570/info eCardMAX is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

eCardMAX - Multiple Cross-Site Scripting Vulnerabilities

eCardMAX - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/43570/info eCardMAX is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

CVE-2007-1906

CVE-2007-1906 affects eCardMAX HotEditor (Hot Editor) 4.0 and the HotEditor plugin for MyBB. The vulnerability is a directory traversal that allows remote attackers to include and execute arbitrary local files by supplying a .. sequence in the first parameter of richedit/keyboard.php. Impact desc...

CVE-2007-1906

Directory traversal vulnerability in richedit/keyboard.php in eCardMAX HotEditor Hot Editor 4.0, and the HotEditor plugin for MyBB, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the first parameter...

Re[2]: новые уязвимости

Здравствуйте, 3APA3A. свежая порция: Software: eCardMAX Standard&Gold Vendor: eCardMAX www.ecardmax.com Vulnerability: межсайтовый скриптинг Risk: низкий Date: 30.12.2005 discovered by durito -duritoatmaildotru- HTTP: all-about-all.net durito.narod.ru +:| Details |: Межсайтовый скриптинг:...