EUVD-2008-3367

Malware in sbrugna...

EasyBookMarker 4.0 'ajaxp_backend.php' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30304/info EasyBookMarker is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in th...

CVE-2009-1509: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ajaxpbackend.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2008-3380: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ajaxpbackend.php in MyioSoft EasyBookMarker 4.0 trial edition tr allows remote attackers to inject arbitrary web script or HTML via the rs parameter...

Easybookmarker 40tr Xss Vulnerability By Khashayar Fereidani

---------------------------------------------------------------- Script : Easybookmarker 40tr Type : Xss Vulnerability Method : POST Alert : High ---------------------------------------------------------------- Discovered by : Khashayar Fereidani a.k.a. Dr.Crash My Offical Website :...

CVE-2008-1344: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote attackers to execute arbitrary SQL commands via the 1 year parameter in a dayview action to plugins/calendar/calendarbackend.php and the 2 page parameter to ajaxpbackend.php...

EasyCalendar <= 4.0tr Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== EasyCalendar 'alert"JosS"%3B 0day.today 2018-02-15...