EUVD-2008-4856

Malware in sbrugna...

EUVD-2008-4857

Malware in sbrugna...

CVE-2008-4877

SQL injection vulnerability in admin.php in WebCards 1.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in admin.php in WebCards 1.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-4878

Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3 allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the uploaded file...

CVE-2008-4877

CVE-2008-4877 describes a SQL injection in WebCards 1.3, specifically in admin.php, exploitable when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to manipulate the underlying SQL via the user parameter, potentially causing arbitrary SQL execution. This is documented acr...

WebCards 1.3 - SQL Injection

-+================================================================================+- -+ WebCards = 1.3 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz Contact: irc.rizon.net sectalk Discovered On: 2...

webcards-sql.txt

-+================================================================================+- -+ WebCards = 1.3 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz Contact: irc.rizon.net sectalk Discovered On: 2...