CVE

Id
31461  
CVE No.
CVE-2008-1344  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year parameter in a dayview action to plugins/calendar/calendar_backend.php and the (2) page parameter to ajaxp_backend.php.  
Phase
Assigned (20080317)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
336938 31461 CVE-2008-1344 BUGTRAQ:20080317 EasyCalendar <= 4.0tr - Multiple Remote Vulnerabilities  View
336939 31461 CVE-2008-1344 URL:http://www.securityfocus.com/archive/1/archive/1/489678/100/0/threaded  View
336940 31461 CVE-2008-1344 MILW0RM:5246  View
336941 31461 CVE-2008-1344 URL:http://www.milw0rm.com/exploits/5246  View
336942 31461 CVE-2008-1344 BID:28232  View
336943 31461 CVE-2008-1344 URL:http://www.securityfocus.com/bid/28232  View
336944 31461 CVE-2008-1344 SECUNIA:29373  View
336945 31461 CVE-2008-1344 URL:http://secunia.com/advisories/29373  View
336946 31461 CVE-2008-1344 XF:easycalendar-year-page-sql-injection(41179)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47542 JVNDB-2008-002852 PHP-Nuke の Weather モジュールの index.php におけるクロスサイトスクリプティングの脆弱性 PHP-Nuke の eWebQuiz eWeather (Weather) モジュールの index.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-1348 31461 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002852.html  View