CVE-2008-5655

MyioSoft EasyBookMarker 4.0 is affected by CVE-2008-5655 and related CVE-2008-5654, with concrete details describing SQL injection in the loginADP function pathway. Specifically, both CVEs reference vulnerabilities in EasyCalendar/EasyBookMarker components where the parameters (1) delete_folder a...

CVE-2008-5651

Product/affected software: MyioSoft EasyBookMarker 4.0 (plugin: bookmarks/backend). Vulnerability: SQL injection in bookmarks_backend.php via the Parent parameter, enabling remote SQL execution. Root cause/impact: Improper input handling allows arbitrary SQL commands; CVSS v2 base score 7.5 (HIGH...

CVE-2008-5652

The CVE-2008-5652 entry concerns MyioSoft EasyBookMarker 4.0. Affected component: loginADP function in ajaxp.php. Root cause: SQL injection via the rsargs parameter, reachable through the username parameter, enabling remote SQL command execution. Exploit details in sources are provided, but expli...

CVE-2008-3380

CVE-2008-3380 concerns a cross-site scripting (XSS) vulnerability in the file ajaxp_backend.php of the MyioSoft EasyBookMarker 4.0 trial edition (tr). The underlying issue is reflected/Stored XSS via the rs parameter, which enables an attacker to inject arbitrary web script or HTML that could be ...