CVE-2008-5652

Published 17 Dec 2008 · Updated 07 Aug 2024

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 1.2%

SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyBookMarker 4.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter. NOTE: some of these details are obtained from third party information.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/7045

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/49701 http://secunia.com/advisories/32673 http://securityreason.com/securityalert/4770 https://exchange.xforce.ibmcloud.com/vulnerabilities/46447 https://www.exploit-db.com/exploits/7045 http://www.securityfocus.com/bid/32199 http://www.vupen.com/english/advisories/2008/3075