Belchior Foundry : Security Vulnerabilities, CVEs, CVSS score >= 6
Cross-site scripting (XSS) vulnerability in gbrowse.php in Belchior Foundry vCard PRO allows remote attackers to inject arbitrary web script or HTML via the sortby parameter.
Max CVSS
6.8
EPSS Score
0.78%
Published
2007-01-04
Updated
2018-10-16
Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter to (a) gbrowse.php, (2) card_id parameter to (b) rating.php and (c) create.php, and the (3) event_id parameter to (d) search.php.
Max CVSS
7.5
EPSS Score
0.23%
Published
2006-07-10
Updated
2018-10-18
Multiple cross-site scripting (XSS) vulnerabilities in Belchior Foundry vCard 2.9 allow remote attackers to inject arbitrary web script or HTML via the page parameter in (1) toprated.php and (2) newcards.php. NOTE: the card_id vector is already covered by CVE-2006-1230.
Max CVSS
6.8
EPSS Score
5.21%
Published
2006-06-05
Updated
2018-10-18
PHP remote file include vulnerability in admin/define.inc.php in Belchior Foundry vCard 2.9 allows remote attackers to execute arbitrary PHP code via the match parameter.
Max CVSS
7.5
EPSS Score
1.42%
Published
2005-10-27
Updated
2008-09-05
4 vulnerabilities found