Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Myiosoft Component: Easycalendar Clear all filters
TI-2008-05362 CVE-2008-5654 · GHSA-frqr-h5gh-5cr8

SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft…

Priority LOW 35

SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyCalendar 4.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username paramet…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01042 Published 2008-12-17 No fix listed CWE-89
TI-2008-01296 CVE-2008-1347 · GHSA-v34f-7pxj-89jr

Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easygallery/index.php…

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01499 Published 2008-03-17 No fix listed CWE-79