EUVD-2007-3074

Malware in sbrugna...

EUVD-2005-2405

Malware in sbrugna...

EUVD-2007-2465

Malware in sbrugna...

EUVD-2007-2464

Malware in sbrugna...

Sendcard <= 3.4.1 (sendcard.php form) Local File Inclusion Vulnerability

No description provided by source. Sendcard sendcard.php Sendcard Local File Inclusion Vulnerability Discovered: ettee Dork: Powered by sendcard - an advanced PHP e-card program -site:sendcard.org powered by Sendcard Bug: // Get the template details if!isset$form || $form == '' $form = form;...

SendCard <= 3.4.0 Unauthorized Administrative Access Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo SendCard = 3.4.0 unauthorized administrative access / remote commands\n; echo execution exploit\n; echo by rgod [email protected]\n; echo site: http://retrogod.altervista.org\n; echo dork: \Powered by sendcard - an...

Sendcard <= 3.4.1 (Local File Inclusion) Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ?php errorreporting0; inisetmaxexecutiontime,0; inisetdefaultsockettimeout,5; if $argc4 print -------------------------------------------------------------------------\r\n; print Sendcard = 3.4.1 Remote Code Execution...

Directory traversal

Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the sclanguage parameter...

CVE-2007-3082

Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the sclanguage parameter...

CVE-2007-3082

Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the sclanguage parameter...

CVE-2007-3082

This CVE affects Sendcard 3.4.1 and earlier, where a directory traversal flaw in sendcard.php allows remote attackers to include and execute arbitrary local files via a .. in the sc_language parameter. The underlying issue is improper validation of a user-controlled path, enabling potential arbit...

CVE-2007-3059

SendCard 3.3.0 allows remote attackers to obtain sensitive information via an invalid sclanguage parameter to sendcard.php, which reveals the path in an error message...

Design/Logic Flaw

SendCard 3.3.0 allows remote attackers to obtain sensitive information via an invalid sclanguage parameter to sendcard.php, which reveals the path in an error message...

CVE-2007-3059

SendCard 3.3.0 allows remote attackers to obtain sensitive information via an invalid sclanguage parameter to sendcard.php, which reveals the path in an error message...

CVE-2007-3059

The CVE-2007-3059 entry concerns SendCard 3.3.0 where a flaw in the sc_language parameter passed to sendcard.php allows remote attackers to trigger an error message that reveals the server path. Affected software: SendCard 3.3.0 (component: sendcard.php handling of sc_language). Root cause: error...

Sendcard &lt;= 3.4.1 (Local File Inclusion) Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ?php errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc4 print "-------------------------------------------------------------------------\r\n"; print " Sendcard = 3.4.1 Remote Code Execution...

Sendcard 3.4.1 - Local File Inclusion Remote Code Execution

Sendcard 3.4.1 - Local File Inclusion Remote Code Execution !/usr/bin/php -q -d shortopentag=on ?php errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc4 print "-------------------------------------------------------------------------\r\n"; print " Sendcard = 3.4...

Sendcard 3.4.1 - Local File Inclusion / Remote Code Execution

!/usr/bin/php -q -d shortopentag=on ?php errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc4 print "-------------------------------------------------------------------------\r\n"; print " Sendcard = 3.4.1 Remote Code Execution Exploit\r\n"; print...

Full Path Disclosure in SendCard

Hello Vulnerable : SendCard Version : 3.3.0 Web : http://www.sendcard.org Exploit : http://example.com/sendcard/sendcard.php?sclanguage='Anything' -------------------- Discovered By LinuxDrox www.LeZr.Com Best Regards ,,,...

sendcard-lfi.txt

Sendcard sendcard.php Sendcard Local File Inclusion Vulnerability Discovered: ettee Dork: "Powered by sendcard - an advanced PHP e-card program" -site:sendcard.org "powered by Sendcard" Bug: "// Get the template details if!isset$form || $form == '' $form = "form"; if!isset$des || $des == '' $des ...