Vulnerabilities > Belchior Foundry
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-01-04 | CVE-2007-0054 | Cross-Site Scripting vulnerability in VCard Pro Cross-site scripting (XSS) vulnerability in gbrowse.php in Belchior Foundry vCard PRO allows remote attackers to inject arbitrary web script or HTML via the sortby parameter. network belchior-foundry | 6.8 |
| 2006-07-10 | CVE-2006-3474 | SQL Injection vulnerability in Belchior Foundry Vcard PRO Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter to (a) gbrowse.php, (2) card_id parameter to (b) rating.php and (c) create.php, and the (3) event_id parameter to (d) search.php. | 7.5 |
| 2006-06-05 | CVE-2006-2810 | Cross-Site Scripting vulnerability in Belchior Foundry Vcard 2.9 Multiple cross-site scripting (XSS) vulnerabilities in Belchior Foundry vCard 2.9 allow remote attackers to inject arbitrary web script or HTML via the page parameter in (1) toprated.php and (2) newcards.php. network belchior-foundry | 6.8 |
| 2006-03-14 | CVE-2006-1230 | Cross-Site Scripting vulnerability in Belchior Foundry Vcard 2.6/2.8/2.9 Multiple cross-site scripting (XSS) vulnerabilities in create.php in vCard 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) card_id, (2) uploaded, (3) card_fontsize, or (4) card_color parameter. | 4.3 |
| 2005-12-31 | CVE-2005-4769 | SQL Injection vulnerability in Belchior Foundry vCard Pro Addrbook.PHP SQL injection vulnerability in addrbook.php in Belchior Foundry vCard PRO 3.1 allows remote attackers to execute arbitrary SQL commands via the addr_id parameter. | 7.5 |
| 2005-10-27 | CVE-2005-3332 | Remote File Include vulnerability in Belchior Foundry Vcard 2.9 PHP remote file include vulnerability in admin/define.inc.php in Belchior Foundry vCard 2.9 allows remote attackers to execute arbitrary PHP code via the match parameter. | 7.5 |
| 2004-12-31 | CVE-2004-1828 | Authentication Bypass vulnerability in Belchior Foundry Vcard 2.8/2.9 Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote attackers to uninstall Vcard and delete database tables via a direct request to uninstall.php. | 5.0 |