CVE-2008-3344

Description

Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition (tr) and 3.10a allow remote attackers to inject arbitrary web script or HTML via the (1) ResultHtml, (2) dir, (3) SenderName, (4) RecipientName, (5) SenderMail, and (6) RecipientMail parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/43923

http://www.securityfocus.com/bid/30328

http://securityreason.com/securityalert/4049

http://secunia.com/advisories/31192

http://marc.info/?l=bugtraq&m=121665294304071&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS