Greg Neustaetter

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Greg Neustaetter records in CISA KEV

No Greg Neustaetter vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gcards 6 records LOW

Records

6 records

TI-2006-01300 CVE-2006-1346 · GHSA-p2c5-vvpj-4jv2

Directory traversal vulnerability in inc/setLang.php in Greg Neustaetter gCards 1.45 and…

LOW 39

Directory traversal vulnerability in inc/setLang.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in a lang[*][file] p…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.07419 Published 2006-03-22 No fix listed

TI-2006-01301 CVE-2006-1347 · GHSA-485q-6829-xvvh

SQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and…

LOW 38

SQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02693 Published 2006-03-22 No fix listed

TI-2007-02877 CVE-2007-2971 · GHSA-9f7x-h9hj-824m

SQL injection vulnerability in getnewsitem.php in gCards 1.46 and earlier allows remote…

LOW 37

SQL injection vulnerability in getnewsitem.php in gCards 1.46 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01979 Published 2007-06-01 No fix listed

TI-2006-05071 CVE-2006-5255 · GHSA-hhw9-pw8h-qc2h

PHP remote file inclusion vulnerability in addnews.php in Greg Neustaetter gCards 1.13…

LOW 36

PHP remote file inclusion vulnerability in addnews.php in Greg Neustaetter gCards 1.13 allows remote attackers to execute arbitrary PHP code via a URL in the languagefile parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01591 Published 2006-10-12 No fix listed

TI-2005-03232 CVE-2005-3408 · GHSA-2jpr-j4c2-5fwj

SQL injection vulnerability in news.php in gCards version 1.43 allows remote attackers to…

LOW 36

SQL injection vulnerability in news.php in gCards version 1.43 allows remote attackers to execute arbitrary SQL commands via the limit parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01321 Published 2005-11-01 No fix listed

TI-2006-01302 CVE-2006-1348 · GHSA-g22h-h5x3-hwcq

Cross-site scripting (XSS) vulnerability in index.php in Greg Neustaetter gCards 1.45 and…

LOW 24

Cross-site scripting (XSS) vulnerability in index.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang[*][file] parameter, which is injected into an…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01976 Published 2006-03-22 No fix listed

Open these records in search →

Critical	0
High	4
Medium	2
Low	0
No CVSS	0