CVE-2008-1345

Cross-site scripting XSS vulnerability in plugins/calendar/calendarbackend.php in MyioSoft EasyCalendar 4.0tr and earlier allows remote attackers to inject arbitrary web script or HTML via the day parameter in a dayview action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO or 2 the q parameter in an about action to the help system...

CVE-2008-1347

CVE-2008-1347 involves multiple XSS vulnerabilities in the MyioSoft EasyGallery 5.0tr and earlier. The affected component is staticpages/easygallery/index.php , where an attacker can trigger script/HTML injection via the PATH_INFO or the q parameter in the about action of the help system. This en...

CVE-2008-1346

CVE-2008-1346 affects MyioSoft EasyGallery (5.0tr and earlier). The vulnerability is a SQL injection in staticpages/easygallery/index.php, exploitable via the catid parameter in a category action, allowing remote attackers to execute arbitrary SQL commands. Public references exist (e.g., Exploit-...

CVE-2008-1345

CVE-2008-1345 affects MyioSoft EasyCalendar (plugins/calendar/calendar_backend.php) up to version 4.0tr and earlier. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the day parameter in a dayview action, allowing remote attackers to inject arbitrary web script or HTML. The ...

CVE-2008-1344

MyioSoft EasyCalendar 4.0tr and earlier are affected by SQL injection in two vectors: (1) year parameter in dayview action to plugins/calendar/calendar_backend.php and (2) page parameter to ajaxp_backend.php. Remote attackers can execute arbitrary SQL commands. Affected software/versions are not ...

AjaxPortal LoginADP函数SQL注入漏洞

BUGTRAQ ID: 18897 AjaxPortal是基于Sajax技术的建站解决方案。 AjaxPortal的的LoginADP函数实现上存在SQL注入漏洞，远程攻击者可能利用此漏洞在服务器上执行任意代码。 仅在禁用了PHP魔术引号的情况下才能利用这个漏洞。 MyioSoft AjaxPortal 3.0 MyioSoft -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://myiosoft.com/...