CVE-2006-3474

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.15%

Published

Jul 10, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (4)

All weaponized →

Exploit-DBvCard PRO - 'create.php?card_id' SQL Injection Exploit-DBvCard PRO - 'gbrowse.php?cat_id' SQL Injection Exploit-DBvCard PRO - 'rating.php?card_id' SQL Injection Exploit-DBvCard PRO - 'search.php?event_id' SQL Injection

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter to (a) gbrowse.php, (2) card_id parameter to (b) rating.php and (c) create.php, and the (3) event_id parameter to (d) search.php.

Affected Products (1)

belchior_foundry · vcardvulnerable

References (8)

http://securityreason.com/securityalert/1230

http://www.securityfocus.com/archive/1/438589/100/100/threaded

http://www.securityfocus.com/bid/18699

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/27427

http://securityreason.com/securityalert/1230

http://www.securityfocus.com/archive/1/438589/100/100/threaded

http://www.securityfocus.com/bid/18699

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/27427

KEV Catalog EPSS Scores Vendors All CVEs