Vulnerabilities

TI-2008-04635 CVE-2008-4878 · GHSA-c42h-jhjr-mv7v

Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3…

MEDIUM 44

Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3 allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessin…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.04021 Published 2008-10-31 No fix listed CWE-20

TI-2008-04634 CVE-2008-4877 · GHSA-vcxr-84m6-prj4

SQL injection vulnerability in admin.php in WebCards 1.3, when magic_quotes_gpc is…

LOW 32

SQL injection vulnerability in admin.php in WebCards 1.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00979 Published 2008-10-31 No fix listed CWE-89

Vulnerabilities

Filters

Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3…

SQL injection vulnerability in admin.php in WebCards 1.3, when magic_quotes_gpc is…