PT-2008-6704 · Myiosoft · Myiosoft Easybookmarker

G4N0K · Published 2008-12-17 · Updated 2017-10-19 · CVE-2008-5651

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MyioSoft EasyBookMarker version 4.0

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the Parent parameter in the plugins/bookmarker/bookmarker backend.php file.

Recommendations For MyioSoft EasyBookMarker version 4.0, consider restricting access to the bookmarker backend.php file until a patch is available. As a temporary workaround, avoid using the Parent parameter in the affected plugin to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2008-5651

Affected Products

Myiosoft Easybookmarker

References · 7

• 🔥 http://securityfocus.com/bid/32200 · Exploit
• 🔥 https://exploit-db.com/exploits/7053 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5651 · Security Note
• http://secunia.com/advisories/32636 · Vendor Advisory
• http://vupen.com/english/advisories/2008/3075 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46474 · Note
• http://osvdb.org/49690 · Note