44 matches found
CVE-2007-2472
Cross-site scripting XSS vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the form parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Directory traversal
Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitrary files via a full pathname in the form parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the form parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-2471
Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitrary files via a full pathname in the form parameter...
CVE-2007-2471
The CVE-2007-2471 entry describes a directory traversal vulnerability in Sendcard 3.4.1 and earlier, where sendcard.php allows remote attackers to read arbitrary files by supplying a full pathname in the form parameter. Affected software: Sendcard ≤ 3.4.1. Underlying cause: inadequate sanitizatio...
CVE-2007-2472
Cross-site scripting XSS vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the form parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-2471
Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitrary files via a full pathname in the form parameter...
CVE-2007-2472
CVE-2007-2472 is an XSS vulnerability in Sendcard 3.4.1 and earlier, affecting sendcard.php where the form parameter can be exploited to inject arbitrary script/HTML. The description notes the vulnerability details come from third-party sources with unknown provenance. Connected documents confirm...
Sendcard (sendcard.php) Sendcard Local File Inclusion Vulnerability
Sendcard sendcard.php Sendcard Local File Inclusion Vulnerability Discovered: ettee Dork: "Powered by sendcard - an advanced PHP e-card program" -site:sendcard.org "powered by Sendcard" Bug: "// Get the template details if!isset$form || $form == '' $form = "form"; if!isset$des || $des == '' $des ...
Sendcard <= 3.4.1 (sendcard.php form) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ======================================================================== Sendcard = 3.4.1 sendcard.php form Local File Inclusion Vulnerability ======================================================================== Sendcard sendcard.php...
Sendcard 3.4.1 - sendcard.php?form Local File Inclusion
Sendcard 3.4.1 - sendcard.php?form Local File Inclusion Sendcard sendcard.php Sendcard Local File Inclusion Vulnerability Discovered: ettee Dork: "Powered by sendcard - an advanced PHP e-card program" -site:sendcard.org "powered by Sendcard" Bug: "// Get the template details if!isset$form || $for...
Sendcard 3.4.1 - 'sendcard.php?form' Local File Inclusion
Sendcard sendcard.php Sendcard Local File Inclusion Vulnerability Discovered: ettee Dork: "Powered by sendcard - an advanced PHP e-card program" -site:sendcard.org "powered by Sendcard" Bug: "// Get the template details if!isset$form || $form == '' $form = "form"; if!isset$des || $des == '' $des ...
sendcard_340_xpl.txt
!/usr/bin/php -q -d shortopentag=on php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary local inclusion\n"; echo " works regardless of php.ini settings\n"; echo " and if you succeed ...
SendCard 3.4.0 - Unauthorized Administrative Access
SendCard 3.4.0 - Unauthorized Administrative Access !/usr/bin/php -q -d shortopentag=on php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary local inclusion\n"; echo " works regardles...
SendCard <= 3.4.0 Unauthorized Administrative Access Exploit
Exploit for unknown platform in category web applications ============================================================ SendCard php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary...
SendCard 3.4.0 - Unauthorized Administrative Access
!/usr/bin/php -q -d shortopentag=on php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary local inclusion\n"; echo " works regardless of php.ini settings\n"; echo " and if you succeed ...
Sendcard SQL injection
The version of Sendcard installed on the remote host is prone to a SQL injection attack due to its failure to sanitize user-supplied input to the SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
[SA19061] MyBB "comma" Parameter SQL Injection Vulnerability
TITLE: sendcard Unspecified SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA19056 VERIFY ADVISORY: http://secunia.com/advisories/19056/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: sendcard 3.x http://secunia.com/product/5427/ DESCRIPTION: Sumit...
Sendcard sendcard.php id Parameter SQL Injection
The remote host is running Sendcard, a multi-database e-card program written in PHP. The version of Sendcard installed on the remote host is prone to a SQL injection attack due to its failure to sanitize user-supplied input to the 'id' field in the 'sendcard.php' script. %NASLMINLEVEL 70300 Josh...