CVE-2006-1347 | Vulnerability Database | Aqua Security

SQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.

Affected Software

Name	Vendor	Start Version	End Version
Gcards	Greg_neustaetter	*	1.45 (including)
Gcards	Greg_neustaetter	1.43 (including)	1.43 (including)
Gcards	Greg_neustaetter	1.44 (including)	1.44 (including)

References

http://attrition.org/pipermail/vim/2006-April/000698.html
http://secunia.com/advisories/19322
http://www.osvdb.org/24017
http://www.securityfocus.com/bid/17165
http://www.vupen.com/english/advisories/2006/1015
https://exchange.xforce.ibmcloud.com/vulnerabilities/25344
https://www.exploit-db.com/exploits/1595
http://attrition.org/pipermail/vim/2006-April/000698.html
http://secunia.com/advisories/19322
http://www.osvdb.org/24017
http://www.securityfocus.com/bid/17165
http://www.vupen.com/english/advisories/2006/1015
https://exchange.xforce.ibmcloud.com/vulnerabilities/25344
https://www.exploit-db.com/exploits/1595

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-1347
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html