vCard 2.82.9 - create.php Multiple Cross-Site Scripting Vulnerabilities

vCard 2.82.9 - create.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17073/info vCard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...

vCard 2.9 - Multiple Cross-Site Scripting Vulnerabilities

vCard 2.9 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/18122/info vCard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

vCard 2.8/2.9 - 'create.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17073/info vCard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...

vCard 2.9 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/18122/info vCard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...

VCardLITE-2.4.txt

=========================================================== Title: Vcard Lite Remote Vulnerabilitie Vulnerability discovery: Disruptor Date: 11/02/2006 Severity: Remote Users Can Execute Arbitrary Code. Affected version: . ------------------------------------------------------------- Fix 1-Remove...

Ubuntu 4.10 / 5.04 : evolution vulnerabilities (USN-166-1)

Ulf Harnhammar disovered several format string vulnerabilities in Evolution. By tricking an user into viewing a specially crafted vCard attached to an email, specially crafted contact data from an LDAP server, specially crafted task lists from remote servers, or saving Calendar entries with this...

[SA18361] Joomla! vCard Email Address Disclosure and TinyMCE Compressor Vulnerabilities

TITLE: Joomla! vCard Email Address Disclosure and TinyMCE Compressor Vulnerabilities SECUNIA ADVISORY ID: SA18361 VERIFY ADVISORY: http://secunia.com/advisories/18361/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of sensitive information WHERE: From remote SOFTWARE: Joomla...

Design/Logic Flaw

The vCard functions in Joomla! 1.0.5 use predictable sequential IDs for vcards and do not restrict access to them, which allows remote attackers to obtain valid e-mail addresses to conduct spam attacks by modifying the contactid parameter to index2.php...

CVE-2006-0114

The vCard functions in Joomla! 1.0.5 use predictable sequential IDs for vcards and do not restrict access to them, which allows remote attackers to obtain valid e-mail addresses to conduct spam attacks by modifying the contactid parameter to index2.php...

CVE-2006-0114

The CVE-2006-0114 entry concerns Joomla! 1.0.5 vCard handling. The affected component is Joomla!’s vCard functionality, which uses predictable, sequential vCard IDs and does not restrict access, enabling remote attackers to discover valid e-mail addresses by altering the contact_id parameter to i...

CVE-2006-0114

The vCard functions in Joomla! 1.0.5 use predictable sequential IDs for vcards and do not restrict access to them, which allows remote attackers to obtain valid e-mail addresses to conduct spam attacks by modifying the contactid parameter to index2.php...

CVE-2005-4769

SQL injection vulnerability in addrbook.php in Belchior Foundry vCard PRO 3.1 allows remote attackers to execute arbitrary SQL commands via the addrid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

vCard define.inc.php match Parameter Remote File Inclusion

The remote host appears to be running vCard, a web-based electronic postcard application from Belchior Foundry and written in PHP. The version of vCard installed on the remote host fails to sanitize the 'match' parameter before using it in the 'admin/define.inc.php' script to read other files. By...

Belchior Foundry vCard Pro 3.1 - Addrbook.php SQL Injection

Belchior Foundry vCard Pro 3.1 - Addrbook.php SQL Injection source: https://www.securityfocus.com/bid/15254/info vCard PRO is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Belchior Foundry vCard Pro 3.1 - 'Addrbook.php' SQL Injection

source: https://www.securityfocus.com/bid/15254/info vCard PRO is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Remote File Inclusion in vCard :)

Remote File Inclusion in :- -------------------------- vCard Date :- ------ 26/10/2005 version :- --------- 2.9 The bug reside in :- ------------------- define.inc.php And error in :- -------------- online.inc.php search google :- --------------- powered by vCard 2.9 & allinurl:vCard Exploit :-...

vCard29.txt

Remote File Inclusion in :- -------------------------- vCard Date :- ------ 26/10/2005 version :- --------- 2.9 The bug reside in :- ------------------- define.inc.php And error in :- -------------- online.inc.php search google :- --------------- powered by vCard 2.9 & allinurl:vCard Exploit :-...

CVE-2005-3265

Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via 1 callto:// and 2 skype:// links, or 3 a non-standard VCARD, possibly due to an underlying error in the SysUtils.WideFmtStr Delphi routine...

CVE-2005-3332

PHP remote file include vulnerability in admin/define.inc.php in Belchior Foundry vCard 2.9 allows remote attackers to execute arbitrary PHP code via the match parameter...

CVE-2005-3332

Vulnerability (CVE-2005-3332) in Belchior Foundry’s vCard 2.9: PHP remote file include in admin/define.inc.php allows an attacker to execute arbitrary PHP code via the match parameter. Multiple sources (NVD, Red Hat advisory, Nessus plugin) corroborate the flaw and impact. Affected software is th...