CVE-2008-5559

CVE-2008-5559 describes a SQL injection vulnerability in the sendcard.cfm component of PostEcards. An attacker can exploit the cid parameter to execute arbitrary SQL commands on the backend database. The NVD entry (CVSSv2 base score 7.5, HIGH) indicates network access with low attack complexity a...

CVE-2008-5560

CVE-2008-5560 : The PostEcards application stores sensitive information under the web root with insufficient access control, allowing remote attackers to download the database file postcards.mdb via a direct request. This represents a path traversal/poor access-control exposure enabling disclosur...