EUVD-2008-3329

Malware in sbrugna...

EUVD-2008-3330

Malware in sbrugna...

CVE-2008-3343

SQL injection vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr trial edition allows remote attackers to execute arbitrary SQL commands via the read parameter in a search action...

CVE-2008-3343

CVE-2008-3343 is a SQL injection vulnerability affecting MyioSoft EasyPublish 3.0tr (trial edition). The flaw is in staticpages/easypublish/index.php where the read parameter in a search action is used unsafely, allowing remote attackers to execute arbitrary SQL commands. Base score 7.5 (HIGH) vi...

CVE-2008-3342

CVE-2008-3342: XSS vulnerability in MyioSoft EasyPublish 3.0tr. Affected component: staticpages/easypublish/index.php, vulnerable via the read parameter in the edp_News action. This could allow remote attackers to inject arbitrary web script or HTML into victims’ browsers. No exploitation details...

CVE-2008-3342: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edpNews action...

CVE-2008-3343: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr trial edition allows remote attackers to execute arbitrary SQL commands via the read parameter in a search action...