Myiosoft Easycalendar vulnerabilities
5 known vulnerabilities affecting myiosoft/easycalendar.
Total CVEs
5
CISA KEV
0
Public exploits
5
Exploited in wild
0
Severity breakdown
HIGH3MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2008-5654P3HIGHCVSS 7.5PoCv4.02008-12-17
CVE-2008-5654 [HIGH] CWE-89 CVE-2008-5654: SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyCalendar 4.0 allow
SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyCalendar 4.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter, a different vector than CVE-2008-1344. NOTE: some of these details are obtained from third party information.
nvd
CVE-2008-1346P3HIGHCVSS 7.5PoCv4.0tr2008-03-17
CVE-2008-1346 [HIGH] CWE-89 CVE-2008-1346: SQL injection vulnerability in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and e
SQL injection vulnerability in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action.
nvd
CVE-2008-1344P3HIGHCVSS 7.5PoCv4.0tr2008-03-17
CVE-2008-1344 [HIGH] CWE-89 CVE-2008-1344: Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote attac
Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year parameter in a dayview action to plugins/calendar/calendar_backend.php and the (2) page parameter to ajaxp_backend.php.
nvd
CVE-2008-1347P4MEDIUMCVSS 4.3PoCv4.0tr2008-03-17
CVE-2008-1347 [MEDIUM] CWE-79 CVE-2008-1347: Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easygallery/index.php in MyioSoft
Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) the q parameter in an about action to the help system.
nvd
CVE-2008-1345P4MEDIUMCVSS 4.3PoCv4.0tr2008-03-17
CVE-2008-1345 [MEDIUM] CWE-79 CVE-2008-1345: Cross-site scripting (XSS) vulnerability in plugins/calendar/calendar_backend.php in MyioSoft EasyCa
Cross-site scripting (XSS) vulnerability in plugins/calendar/calendar_backend.php in MyioSoft EasyCalendar 4.0tr and earlier allows remote attackers to inject arbitrary web script or HTML via the day parameter in a dayview action.
nvd