56 matches found
CVE-2006-1348
The CVE-2006-1348 entry relates to gCards (PHP)
CVE-2006-1348
Cross-site scripting XSS vulnerability in index.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to inject arbitrary web script or HTML via the langfile parameter, which is injected into an error message. NOTE: this issue might be resultant from CVE-2006-1346...
CVE-2006-1348: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to inject arbitrary web script or HTML via the langfile parameter, which is injected into an error message. NOTE: this issue might be resultant from CVE-2006-1346...
CVE-2006-1347: Undefined Security Weakness
SQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2006-1346: Undefined Security Weakness
Directory traversal vulnerability in inc/setLang.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in a langfile parameter, as demonstrated by injecting PHP sequences into an Apache accesslog file...
gCards 1.45 - Multiple Vulnerabilities
gCards 1.45 - Multiple Vulnerabilities !/usr/bin/php -q -d shortopentag=on languageredirect == $SERVER'PHPSELF' if isset$GET'setLang' $SESSION'setLang' = $GET'setLang'; $langFile = $page-relpath.'inc/lang/'.$lang$SESSION'setLang''file'; if fileexists$langFile includeonce$langFile; else echo "Coul...
gCards 1.45 - Multiple Vulnerabilities
!/usr/bin/php -q -d shortopentag=on languageredirect == $SERVER'PHPSELF' if isset$GET'setLang' $SESSION'setLang' = $GET'setLang'; $langFile = $page-relpath.'inc/lang/'.$lang$SESSION'setLang''file'; if fileexists$langFile includeonce$langFile; else echo "Could not find language file $langFile"; ?...
gCards <= 1.45 Multiple Vulnerabilities All-In-One Exploit
Exploit for unknown platform in category web applications ========================================================== gCards languageredirect == $SERVER'PHPSELF' if isset$GET'setLang' $SESSION'setLang' = $GET'setLang'; $langFile = $page-relpath.'inc/lang/'.$lang$SESSION'setLang''file'; if...
gCards <= 1.45 Multiple Vulnerabilities All-In-One Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "gCards = 1.45 multiple vulnerabilities\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "Sun-Tzu:"At first, then, exhibit the coyness of a maiden, until the\r\n";...
CVE-2005-3408
SQL injection vulnerability in news.php in gCards version 1.43 allows remote attackers to execute arbitrary SQL commands via the limit parameter...
CVE-2005-3408
CVE-2005-3408 : SQL injection in news.php of gCards version 1.43, caused by unsafely using the limit parameter in an SQL query. This enables remote attackers to execute arbitrary SQL commands. The vulnerability is described with a CVSSv2 base score of 7.5 (High) with network attack vector, requir...
CVE-2005-3408
SQL injection vulnerability in news.php in gCards version 1.43 allows remote attackers to execute arbitrary SQL commands via the limit parameter...
CVE-2005-3408: Undefined Security Weakness
SQL injection vulnerability in news.php in gCards version 1.43 allows remote attackers to execute arbitrary SQL commands via the limit parameter...
[SA17353] gCards "limit" SQL Injection Vulnerability
TITLE: gCards "limit" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA17353 VERIFY ADVISORY: http://secunia.com/advisories/17353/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: gCards 1.x http://secunia.com/product/6004/ DESCRIPTION: svsecurity has...
GCards 1.43 - news.php SQL Injection
GCards 1.43 - news.php SQL Injection source: https://www.securityfocus.com/bid/15216/info gCards is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
GCards 1.43 - 'news.php' SQL Injection
source: https://www.securityfocus.com/bid/15216/info gCards is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...