CVE-2008-3345: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition tr and 3.10a, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a pickup action...

CVE-2008-3344: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition tr and 3.10a allow remote attackers to inject arbitrary web script or HTML via the 1 ResultHtml, 2 dir, 3 SenderName, 4 RecipientName, 5 SenderMail, and 6 RecipientMail...

Easyecards 310a Multipe Vulerabilities ( Xss / Sql Injection Exploit / File Disclosure Exploit ) By Khashayar Fereidani

!/usr/bin/perl ---------------------------------------------------------------- Script : Easyecards 310a Type : Multipe Vulerabilities Xss / Sql Injection Exploit / File Disclosure Exploit Variable Method : GET Alert : High ---------------------------------------------------------------- Discover...