CVE-2008-5654

ALTO 7.5CVE-2008-5654 · Published 17/12/2008 · updated 16/06/2026

En resumen

CVE-2008-5654 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a easycalendar (myiosoft).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.0%, mayor que el 64.1% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
easycalendar myiosoft	`= 4.0`	No fix yet

Description

SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyCalendar 4.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter, a different vector than CVE-2008-1344. NOTE: some of these details are obtained from third party information.

References

osvdb.org/49702
secunia.com/advisories/32673 · Vendor Advisory
securityfocus.com/bid/32199
exchange.xforce.ibmcloud.com/vulnerabilities/46448
exploit-db.com/exploits/7046

Más vulnerabilidades de easycalendar

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free