← Database

CVE-2007-2971

HIGH CVSS: 7.5 Published: 2007-06-01 Modified: 2026-06-16

Description

SQL injection vulnerability in getnewsitem.php in gCards 1.46 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter.

Affected Platforms

Greg Neustaetter Gcards

Weakness Type

NVD-CWE-Other

References