CVEvulnerability
CVE-2008-3344
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-07-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition (tr) and 3.10a allow remote attackers to inject arbitrary web script or HTML via the (1) ResultHtml, (2) dir, (3) SenderName, (4) RecipientName, (5) SenderMail, and (6) RecipientMail parameters.
Affected configurations
• myiosoft easye-cards 3.5
• myiosoft easye-cards 3.10
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://marc.info/?l=bugtraq&m=121665294304071&w=2 Patch
- http://secunia.com/advisories/31192 Vendor Advisory
- http://securityreason.com/securityalert/4049 securityreason.com
- http://www.securityfocus.com/bid/30328 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43923 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=121665294304071&w=2 Patch
- http://secunia.com/advisories/31192 Vendor Advisory
- http://securityreason.com/securityalert/4049 securityreason.com
- http://www.securityfocus.com/bid/30328 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43923 exchange.xforce.ibmcloud.com