PT-2005-4206 · Gcards · Gcards

Published 2005-11-01 · Updated 2017-07-11 · CVE-2005-3408

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions gCards version 1.43

Description A SQL injection issue in the news.php file allows remote attackers to execute arbitrary SQL commands by manipulating the limit parameter.

Recommendations For gCards version 1.43, consider restricting access to the news.php file or avoiding the use of the limit parameter until a fix is available.

Exploit

Fix

Related Identifiers

CVE-2005-3408

Affected Products

Gcards

References · 10

• 🔥 http://securitytracker.com/id?1015106 · Exploit
• 🔥 http://fr33d0m.net/content-1783.html · Exploit
• 🔥 https://exploit-db.com/exploits/26427 · Exploit
• 🔥 http://securityfocus.com/bid/15216 · Exploit
• http://secunia.com/advisories/17353 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3408 · Security Note
• http://osvdb.org/20329 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3408 · Note
• http://vupen.com/english/advisories/2005/2223 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22884 · Note