CVEvulnerability
CVE-2008-5652
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-12-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyBookMarker 4.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter. NOTE: some of these details are obtained from third party information.
Affected configurations
• myiosoft easybookmarker 4.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/49701 osvdb.org
- http://secunia.com/advisories/32673 Vendor Advisory
- http://securityreason.com/securityalert/4770 securityreason.com
- http://www.securityfocus.com/bid/32199 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/3075 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46447 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7045 www.exploit-db.com
- http://osvdb.org/49701 osvdb.org
- http://secunia.com/advisories/32673 Vendor Advisory
- http://securityreason.com/securityalert/4770 securityreason.com
- http://www.securityfocus.com/bid/32199 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/3075 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46447 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7045 www.exploit-db.com