CVE-2008-5654 | BDVDB-2026-33971 Detail

Description#

SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyCalendar 4.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter, a different vector than CVE-2008-1344. NOTE: some of these details are obtained from third party information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/46448
http://osvdb.org/49702
https://www.exploit-db.com/exploits/7046
http://secunia.com/advisories/32673
http://www.securityfocus.com/bid/32199

Exploit#

https://www.exploit-db.com/exploits/7046

History#

Version 12008-12-17Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.