| Package | Affected versions | Patched versions |
|---|---|---|
| easye-cards | = 3.10= 3.5 |
SQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition (tr) and 3.10a, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a pickup action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free