Vulnerability Details CVE-2006-3474
Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter to (a) gbrowse.php, (2) card_id parameter to (b) rating.php and (c) create.php, and the (3) event_id parameter to (d) search.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://securityreason.com/securityalert/1230
- http://www.securityfocus.com/archive/1/438589/100/100/threaded
- http://www.securityfocus.com/bid/18699
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27427
- http://securityreason.com/securityalert/1230
- http://www.securityfocus.com/archive/1/438589/100/100/threaded
- http://www.securityfocus.com/bid/18699
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27427
Products affected by CVE-2006-3474
-
cpe:2.3:a:belchior_foundry:vcard:pro