Sendcard Multiple Unspecified SQL Injection Vulnerabilities
BID:16900
Info
Sendcard Multiple Unspecified SQL Injection Vulnerabilities
| Bugtraq ID: | 16900 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 01 2006 12:00AM |
| Updated: | Mar 05 2006 10:21PM |
| Credit: | Sumit Siddharth is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Sendcard Sendcard 3.2.3 Sendcard Sendcard 3.2.2 Sendcard Sendcard 3.2.1 Sendcard Sendcard 3.2 |
| Not Vulnerable: |
Sendcard Sendcard 3.3 |
Discussion
Sendcard Multiple Unspecified SQL Injection Vulnerabilities
Sendcard is prone to multiple unspecified SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
These issues affect Sendcard versions prior to 3.3.0.
Sendcard is prone to multiple unspecified SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
These issues affect Sendcard versions prior to 3.3.0.
Exploit / POC
Sendcard Multiple Unspecified SQL Injection Vulnerabilities
An attacker likely utilizes a web browser to exploit these issues.
An attacker likely utilizes a web browser to exploit these issues.
Solution / Fix
Sendcard Multiple Unspecified SQL Injection Vulnerabilities
Solution:
The vendor has released an updated version of Sendcard to address these issues.
Sendcard Sendcard 3.2
Sendcard Sendcard 3.2.1
Sendcard Sendcard 3.2.2
Sendcard Sendcard 3.2.3
Solution:
The vendor has released an updated version of Sendcard to address these issues.
Sendcard Sendcard 3.2
-
Sendcard sendcard_3-3-0.tar.gz
http://prdownloads.sourceforge.net/sendcard/sendcard_3-3-0.tar.gz?down load
Sendcard Sendcard 3.2.1
-
Sendcard sendcard_3-3-0.tar.gz
http://prdownloads.sourceforge.net/sendcard/sendcard_3-3-0.tar.gz?down load
Sendcard Sendcard 3.2.2
-
Sendcard sendcard_3-3-0.tar.gz
http://prdownloads.sourceforge.net/sendcard/sendcard_3-3-0.tar.gz?down load
Sendcard Sendcard 3.2.3
-
Sendcard sendcard_3-3-0.tar.gz
http://prdownloads.sourceforge.net/sendcard/sendcard_3-3-0.tar.gz?down load
References
Sendcard Multiple Unspecified SQL Injection Vulnerabilities
References:
References:
- Sendcard Homepage (Sendcard)