VendorsGreg Neustaettergcards1.13
Vulnerabilities

Greg Neustaetter Gcards 1.13

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2007-2971
SQL injection vulnerability in getnewsitem.php in gCards 1.46 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter.
Published 2007-06-01 · Modified
7.51 PoCEPSS 0.020
CVE-2006-5255
PHP remote file inclusion vulnerability in addnews.php in Greg Neustaetter gCards 1.13 allows remote attackers to execute arbitrary PHP code via a URL in the languagefile parameter. NOTE: another researcher has observed that languageFile is defined before use. CVE analysis as of 20061012 concurs with the dispute
Published 2006-10-12 · Modified
7.5EPSS 0.016