EUVD-2009-3579

Malware in sbrugna...

eCardMAX 10.5 SQL Injection

Exploit Title: eCardMAX 10.5 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage : https://www.ecardmax.com/ Software Link: https://www.ecardmax.com/home/ecardmax/ Demo: https://ecardmax.com/ecardmaxdemo/ Version: 10.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit...

eCardMAX 10.5 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: eCardMAX 10.5 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage : https://www.ecardmax.com/ Software Link: https://www.ecardmax.com/home/ecardmax/ Demo: https://ecardmax.com/ecardmaxdemo/ Version: 10.5 Category: Webapps...

eCardMAX 10.5 - SQL Injection

eCardMAX 10.5 - SQL Injection Exploit Title: eCardMAX 10.5 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage : https://www.ecardmax.com/ Software Link: https://www.ecardmax.com/home/ecardmax/ Demo: https://ecardmax.com/ecardmaxdemo/ Version: 10.5 Category: Webapps Tested on:...

eCardMAX 10.5 - SQL Injection

Exploit Title: eCardMAX 10.5 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage : https://www.ecardmax.com/ Software Link: https://www.ecardmax.com/home/ecardmax/ Demo: https://ecardmax.com/ecardmaxdemo/ Version: 10.5 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit...

eCardMAX 10.5 - Multiple Vulnerabilities

eCardMAX 10.5 - Multiple Vulnerabilities Advisory ID: ZSL-2016-5336 Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5336.php eCardMAX 10.5 SQL Injection and XSS Vulnerabilities Software - eCardMAX 10.5 Vendor - eCardMAX.COM - http://www.ecardmax.com/ Vendor Product Description...

eCardMAX 10.5 Cross Site Scripting / SQL Injection

eCardMAX 10.5 SQL Injection and XSS Vulnerabilities Software - eCardMAX 10.5 Vendor - eCardMAX.COM - http://www.ecardmax.com/ Vendor Product Description - eCardMax is the most trusted, powerful and dynamic online ecard software solution. It enables you to create your own ecard website with many o...

eCardMAX 10.5 - Multiple Vulnerabilities

Exploit for php platform in category web applications eCardMAX 10.5 SQL Injection and XSS Vulnerabilities Software - eCardMAX 10.5 Vendor - eCardMAX.COM - http://www.ecardmax.com/ Vendor Product Description - eCardMax is the most trusted, powerful and dynamic online ecard software solution. It...

eCardMAX 10.5 - Multiple Vulnerabilities

Advisory ID: ZSL-2016-5336 Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5336.php eCardMAX 10.5 SQL Injection and XSS Vulnerabilities Software - eCardMAX 10.5 Vendor - eCardMAX.COM - http://www.ecardmax.com/ Vendor Product Description - eCardMax is the most trusted, powerful...

eCardMAX 10.5 Multiple Vulnerabilities

Summary eCardMax is the most trusted, powerful and dynamic online ecard software solution. It enables you to create your own ecard website with many of the advanced features found on other major sites. Starting your own ecard website with eCardMax is fast and easy. Description eCardMAX suffers fr...

eCardMAX HotEditor 4.0 Keyboard.PHP Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23377/info eCardMAX HotEditor is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local...

Cross site scripting

Cross-site scripting XSS vulnerability in surveyresult.php in eCardMAX FormXP 2007 allows remote attackers to inject arbitrary web script or HTML via the sid parameter...

CVE-2009-3598

Cross-site scripting XSS vulnerability in surveyresult.php in eCardMAX FormXP 2007 allows remote attackers to inject arbitrary web script or HTML via the sid parameter...

CVE-2009-3598

The CVE-2009-3598 entry concerns a Cross-site scripting (XSS) vulnerability in survey_result.php of eCardMAX FormXP 2007. The flaw allows remote attackers to inject arbitrary web script or HTML via the sid parameter. Documented impact is the ability to execute script in a victim’s browser for aff...

eCardMAX 2006 Cross Site Scripting

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

eCardMAX 2008 Cross Site Scripting

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

eCardMAX - Multiple Cross-Site Scripting Vulnerabilities

eCardMAX - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/43570/info eCardMAX is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

eCardMAX - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43570/info eCardMAX is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

CVE-2007-1906

Directory traversal vulnerability in richedit/keyboard.php in eCardMAX HotEditor Hot Editor 4.0, and the HotEditor plugin for MyBB, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the first parameter...

CVE-2007-1906

Directory traversal vulnerability in richedit/keyboard.php in eCardMAX HotEditor Hot Editor 4.0, and the HotEditor plugin for MyBB, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the first parameter...