Sql injection

SQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-1347

CVE-2006-1347 affects gCards

gCards 1.45 - Multiple Vulnerabilities

!/usr/bin/php -q -d shortopentag=on languageredirect == $SERVER'PHPSELF' if isset$GET'setLang' $SESSION'setLang' = $GET'setLang'; $langFile = $page-relpath.'inc/lang/'.$lang$SESSION'setLang''file'; if fileexists$langFile includeonce$langFile; else echo "Could not find language file $langFile"; ?...