Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2008-1344

Disclosure Date: March 17, 2008 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year parameter in a dayview action to plugins/calendar/calendar_backend.php and the (2) page parameter to ajaxp_backend.php.
0
0
Attacker Value
Unknown

CVE-2008-1345

Disclosure Date: March 17, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in plugins/calendar/calendar_backend.php in MyioSoft EasyCalendar 4.0tr and earlier allows remote attackers to inject arbitrary web script or HTML via the day parameter in a dayview action.
0
0
Attacker Value
Unknown

CVE-2008-1346

Disclosure Date: March 17, 2008 (last updated October 04, 2023)
SQL injection vulnerability in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action.
0
0
Attacker Value
Unknown

CVE-2008-1347

Disclosure Date: March 17, 2008 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) the q parameter in an about action to the help system.
0
0