high7.5Public exploit code
CVE-2006-3474
Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter to (…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- vCard PRO - 'search.php?event_id' SQL Injection2006-06-19 · webapps · php · Verified
- vCard PRO - 'create.php?card_id' SQL Injection2006-06-19 · webapps · php · Verified
- vCard PRO - 'rating.php?card_id' SQL Injection2006-06-19 · webapps · php · Verified
- vCard PRO - 'gbrowse.php?cat_id' SQL Injection2006-06-19 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter to (a) gbrowse.php, (2) card_id parameter to (b) rating.php and (c) create.php, and the (3) event_id parameter to (d) search.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Belchior Foundry | Vcard | Version pro |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/1230
- http://www.securityfocus.com/archive/1/438589/100/100/threaded
- http://www.securityfocus.com/bid/18699
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27427
- http://securityreason.com/securityalert/1230
- http://www.securityfocus.com/archive/1/438589/100/100/threaded
- http://www.securityfocus.com/bid/18699
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27427