Show filters
24 Total Results
Displaying 11-20 of 24
Sort by:
Attacker Value
Unknown
CVE-2008-3347
Disclosure Date: July 28, 2008 (last updated October 04, 2023)
SQL injection vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition (tr) allows remote attackers to execute arbitrary SQL commands via the read parameter.
0
Attacker Value
Unknown
CVE-2008-3342
Disclosure Date: July 28, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edp_News action.
0
Attacker Value
Unknown
CVE-2008-3348
Disclosure Date: July 28, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition (tr) allows remote attackers to inject arbitrary web script or HTML via the year parameter.
0
Attacker Value
Unknown
CVE-2008-3345
Disclosure Date: July 28, 2008 (last updated October 04, 2023)
SQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition (tr) and 3.10a, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a pickup action.
0
Attacker Value
Unknown
CVE-2008-3344
Disclosure Date: July 28, 2008 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition (tr) and 3.10a allow remote attackers to inject arbitrary web script or HTML via the (1) ResultHtml, (2) dir, (3) SenderName, (4) RecipientName, (5) SenderMail, and (6) RecipientMail parameters.
0
Attacker Value
Unknown
CVE-2008-1649
Disclosure Date: April 02, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in EasyNews 4.0 allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edp_pupublish action.
0
Attacker Value
Unknown
CVE-2008-1650
Disclosure Date: April 02, 2008 (last updated October 04, 2023)
SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote attackers to execute arbitrary SQL commands via the read parameter in an edp_Help_Internal_News action.
0
Attacker Value
Unknown
CVE-2008-1651
Disclosure Date: April 02, 2008 (last updated October 04, 2023)
Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.
0
Attacker Value
Unknown
CVE-2008-1344
Disclosure Date: March 17, 2008 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year parameter in a dayview action to plugins/calendar/calendar_backend.php and the (2) page parameter to ajaxp_backend.php.
0
Attacker Value
Unknown
CVE-2008-1345
Disclosure Date: March 17, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in plugins/calendar/calendar_backend.php in MyioSoft EasyCalendar 4.0tr and earlier allows remote attackers to inject arbitrary web script or HTML via the day parameter in a dayview action.
0
