EUVD-2007-3074

Malware in sbrugna...

Directory traversal

Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the sclanguage parameter...

CVE-2007-3082

Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the sclanguage parameter...

CVE-2007-3059

The CVE-2007-3059 entry concerns SendCard 3.3.0 where a flaw in the sc_language parameter passed to sendcard.php allows remote attackers to trigger an error message that reveals the server path. Affected software: SendCard 3.3.0 (component: sendcard.php handling of sc_language). Root cause: error...