Skip to content
Noroxi

sendcard records

6 published records for vendor sendcard.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    6 records
    • CVE-2007-3082
      32Monitor

      Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to include and execute arbitrary loc

      HighCVSS 7.8Proof of conceptEPSS 3%

      sendcard · sendcardJun 6, 2007

    • CVE-2005-2404
      30Monitor

      SQL injection vulnerability in sendcard.php in Sendcard 3.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter

      HighCVSS 7.5No exploitEPSS 1%

      sendcard · sendcardJul 27, 2005

    • CVE-2006-1006
      30Monitor

      Multiple SQL injection vulnerabilities in sendcard.php in sendcard before 3.3.0 allow remote attackers to execute arbitrary SQL commands via

      HighCVSS 7.5No exploitEPSS 1%

      sendcard · sendcardMar 6, 2006

    • CVE-2007-2471
      21Monitor

      Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitrary files via a full p

      MediumCVSS 5.0Proof of conceptEPSS 3%

      sendcard · sendcardMay 2, 2007

    • CVE-2007-3059
      20Monitor

      SendCard 3.3.0 allows remote attackers to obtain sensitive information via an invalid sc_language parameter to sendcard.php, which reveals t

      MediumCVSS 5.0No exploitEPSS 1%

      sendcard · sendcardJun 5, 2007

    • CVE-2007-2472
      17Monitor

      Cross-site scripting (XSS) vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to inject arbitrary web scrip

      MediumCVSS 4.3No exploitEPSS 1%

      sendcard · sendcardMay 2, 2007