CVEvulnerability
CVE-2008-5654
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-12-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyCalendar 4.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter, a different vector than CVE-2008-1344. NOTE: some of these details are obtained from third party information.
Affected configurations
• myiosoft easycalendar 4.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/49702 osvdb.org
- http://secunia.com/advisories/32673 Vendor Advisory
- http://www.securityfocus.com/bid/32199 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46448 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7046 www.exploit-db.com
- http://osvdb.org/49702 osvdb.org
- http://secunia.com/advisories/32673 Vendor Advisory
- http://www.securityfocus.com/bid/32199 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46448 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7046 www.exploit-db.com