SQL injection vulnerability in getnewsitem.php in gCards 1.46 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gcards | Greg_neustaetter | * | 1.46 (including) |
| Gcards | Greg_neustaetter | 1.13 (including) | 1.13 (including) |
| Gcards | Greg_neustaetter | 1.43 (including) | 1.43 (including) |
| Gcards | Greg_neustaetter | 1.44 (including) | 1.44 (including) |
| Gcards | Greg_neustaetter | 1.45 (including) | 1.45 (including) |