Dazzlindonna Postecards

2 CVEs affecting Dazzlindonna Postecards. Latest disclosed: 2008-12-15. Critical: 0, High: 0.

Top CVEs affecting Dazzlindonna Postecards
CVESeverityScorePublishedSummary
CVE-2008-55602008-12-15PostEcards stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a…
CVE-2008-55592008-12-15SQL injection vulnerability in sendcard.cfm in PostEcards allows remote attackers to execute arbitrary SQL commands via the cid parameter.