Skip to content

CVE-2008-6622 SQL injection vulnerability in choosecard.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02, 1.01, and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.

HighCVSS 7.5 EPSS 0.97% Public exploit
Published
Updated
Exploit status
Public exploit available

Description

SQL injection vulnerability in choosecard.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02, 1.01, and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.

Affected products

ProductAffected versionsFixed in
webbdomian post card <= 1.02 No fix listed
webbdomian post card = 1.01 No fix listed

References

  • 49823 exploit vdb-entry
  • 32494 third-party-advisory vendor-advisory
  • 32097 exploit vdb-entry
  • 6977 exploit