CVE-2008-4084

SQL injection vulnerability in staticpages/easyclassifields/index.php in MyioSoft EasyClassifields 3.0 allows remote attackers to execute arbitrary SQL commands via the go parameter in a browse action...

CVE-2008-4084

SQL injection vulnerability in staticpages/easyclassifields/index.php in MyioSoft EasyClassifields 3.0 allows remote attackers to execute arbitrary SQL commands via the go parameter in a browse action...

CVE-2008-4084

CVE-2008-4084 describes a SQL injection in the staticpages/easyclassifields/index.php front end of MyioSoft EasyClassifields 3.0 . The vulnerability allows remote attackers to execute arbitrary SQL commands via the go parameter in a browse action. The connected documents confirm the flaw’s existe...

CVE-2008-3380

Cross-site scripting XSS vulnerability in ajaxpbackend.php in MyioSoft EasyBookMarker 4.0 trial edition tr allows remote attackers to inject arbitrary web script or HTML via the rs parameter...

CVE-2008-3380

CVE-2008-3380 concerns a cross-site scripting (XSS) vulnerability in the file ajaxp_backend.php of the MyioSoft EasyBookMarker 4.0 trial edition (tr). The underlying issue is reflected/Stored XSS via the rs parameter, which enables an attacker to inject arbitrary web script or HTML that could be ...

CVE-2008-3380

Cross-site scripting XSS vulnerability in ajaxpbackend.php in MyioSoft EasyBookMarker 4.0 trial edition tr allows remote attackers to inject arbitrary web script or HTML via the rs parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition tr and 3.10a allow remote attackers to inject arbitrary web script or HTML via the 1 ResultHtml, 2 dir, 3 SenderName, 4 RecipientName, 5 SenderMail, and 6 RecipientMail...

Cross site scripting

Cross-site scripting XSS vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition tr allows remote attackers to inject arbitrary web script or HTML via the year parameter...

CVE-2008-3345

SQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition tr and 3.10a, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a pickup action...

CVE-2008-3343

SQL injection vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr trial edition allows remote attackers to execute arbitrary SQL commands via the read parameter in a search action...

CVE-2008-3347

SQL injection vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition tr allows remote attackers to execute arbitrary SQL commands via the read parameter...

CVE-2008-3348

Cross-site scripting XSS vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition tr allows remote attackers to inject arbitrary web script or HTML via the year parameter...

CVE-2008-3348

The CVE-2008-3348 issue affects MyioSoft EasyDynamicPages 3.0 trial edition (tr). The vulnerable component is staticpages/easycalendar/index.php, where the year parameter enables cross-site scripting (XSS). The underlying effect is that remote attackers can inject arbitrary web script or HTML, po...

CVE-2008-3343

CVE-2008-3343 is a SQL injection vulnerability affecting MyioSoft EasyPublish 3.0tr (trial edition). The flaw is in staticpages/easypublish/index.php where the read parameter in a search action is used unsafely, allowing remote attackers to execute arbitrary SQL commands. Base score 7.5 (HIGH) vi...

CVE-2008-3345

The CVE-2008-3345 entry describes a SQL injection in MyioSoft EasyE-Cards (3.5 trial edition and 3.10a) via staticpages/easyecards/index.php when magic_quotes_gpc is disabled. The vulnerability affects the sid parameter in a pickup action, allowing remote SQL command execution. No fixes or remedi...

CVE-2008-3344

CVE-2008-3344 affects MyioSoft EasyE-Cards, specifically the staticpages/easyecards/index.php component in versions 3.5 trial edition (tr) and 3.10a. The issue is multiple reflected XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the parameters ResultHtm...

CVE-2008-3342

CVE-2008-3342: XSS vulnerability in MyioSoft EasyPublish 3.0tr. Affected component: staticpages/easypublish/index.php, vulnerable via the read parameter in the edp_News action. This could allow remote attackers to inject arbitrary web script or HTML into victims’ browsers. No exploitation details...

easydynamicpages-sqlxssdisclose.txt

!/usr/bin/perl ---------------------------------------------------------------- Script : Easydynamicpages 30tr Type : Multipe Vulerabilities Xss / Sql Injection Exploit / File Disclosure Exploit Variable Method : GET Alert : High ----------------------------------------------------------------...

Sql injection

SQL injection vulnerability in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action...

CVE-2008-1344

Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote attackers to execute arbitrary SQL commands via the 1 year parameter in a dayview action to plugins/calendar/calendarbackend.php and the 2 page parameter to ajaxpbackend.php...