CVE-2008-3344

CVE-2008-3344 affects MyioSoft EasyE-Cards, specifically the staticpages/easyecards/index.php component in versions 3.5 trial edition (tr) and 3.10a. The issue is multiple reflected XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the parameters ResultHtm...

CVE-2008-3345

The CVE-2008-3345 entry describes a SQL injection in MyioSoft EasyE-Cards (3.5 trial edition and 3.10a) via staticpages/easyecards/index.php when magic_quotes_gpc is disabled. The vulnerability affects the sid parameter in a pickup action, allowing remote SQL command execution. No fixes or remedi...