CVE-2008-1347

CVE-2008-1347 involves multiple XSS vulnerabilities in the MyioSoft EasyGallery 5.0tr and earlier. The affected component is staticpages/easygallery/index.php , where an attacker can trigger script/HTML injection via the PATH_INFO or the q parameter in the about action of the help system. This en...

CVE-2008-1344

MyioSoft EasyCalendar 4.0tr and earlier are affected by SQL injection in two vectors: (1) year parameter in dayview action to plugins/calendar/calendar_backend.php and (2) page parameter to ajaxp_backend.php. Remote attackers can execute arbitrary SQL commands. Affected software/versions are not ...

CVE-2008-5654

Summary (CVE-2008-5654): SQL injection vulnerability in the loginADP function of ajaxp.php in MyioSoft EasyCalendar 4.0 (and earlier per related CVE-2008-1344) allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, reachable through the username parameter. This is a d...

CVE-2008-1346

CVE-2008-1346 affects MyioSoft EasyGallery (5.0tr and earlier). The vulnerability is a SQL injection in staticpages/easygallery/index.php, exploitable via the catid parameter in a category action, allowing remote attackers to execute arbitrary SQL commands. Public references exist (e.g., Exploit-...

CVE-2008-1345

CVE-2008-1345 affects MyioSoft EasyCalendar (plugins/calendar/calendar_backend.php) up to version 4.0tr and earlier. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the day parameter in a dayview action, allowing remote attackers to inject arbitrary web script or HTML. The ...