EUVD-2006-1010

Malware in sbrugna...

CVE-2007-3059: Undefined Security Weakness

SendCard 3.3.0 allows remote attackers to obtain sensitive information via an invalid sclanguage parameter to sendcard.php, which reveals the path in an error message...

CVE-2007-3082: Undefined Security Weakness

Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the sclanguage parameter...

Sendcard <= 3.4.1 (sendcard.php form) Local File Inclusion Vulnerability

No description provided by source. Sendcard sendcard.php Sendcard Local File Inclusion Vulnerability Discovered: ettee Dork: "Powered by sendcard - an advanced PHP e-card program" -site:sendcard.org "powered by Sendcard" Bug: "// Get the template details if!isset$form || $form == '' $form = "form...

CVE-2007-2472: Undefined Security Weakness

Cross-site scripting XSS vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the form parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-2471: Undefined Security Weakness

Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitrary files via a full pathname in the form parameter...

Sendcard <= 3.4.1 (sendcard.php form) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Sendcard = 3.4.1 sendcard.php form Local File Inclusion Vulnerability ======================================================================== Sendcard sendcard.php...

Sql injection

Multiple SQL injection vulnerabilities in sendcard.php in sendcard before 3.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters...

CVE-2006-1006

Multiple SQL injection vulnerabilities in sendcard.php in sendcard before 3.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters...

CVE-2006-1006

The CVE-2006-1006 entry describes multiple SQL injection vulnerabilities in the sendcard.php component of the SendCard package up to version 3.3.0. The underlying issue is unsafe handling of input parameters (reported as “unspecified parameters”), enabling remote attackers to execute arbitrary SQ...

CVE-2006-1006

Multiple SQL injection vulnerabilities in sendcard.php in sendcard before 3.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters...

CVE-2006-1006: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in sendcard.php in sendcard before 3.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters...

CVE-2005-2404: Undefined Security Weakness

SQL injection vulnerability in sendcard.php in Sendcard 3.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...