CVE-2008-6623 SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.
HighCVSS 7.5
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webbdomain post card | <= 1.02 | No fix listed |
| webbdomain post card | = 1.01 | No fix listed |
References
- 49824 vdb-entry
- 32494 third-party-advisory vendor-advisory
- 32108 exploit vdb-entry
- postcard-getin-sql-injection(46359) vdb-entry
- 6989 exploit