CVE-2006-2264

CVE-2006-2264 affects Ocean12 Calendar Manager Pro 1.00, with multiple SQL injection vulnerabilities that allow a remote attacker to execute arbitrary SQL commands via (1) date parameter to admin/main.asp, (2) SearchFor parameter to admin/view.asp, or (3) ID parameter to admin/edit.asp. The explo...

CVE-2006-2264: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary SQL commands via the 1 date parameter to admin/main.asp, 2 SearchFor parameter to admin/view.asp, or 3 ID parameter to admin/edit.asp. NOTE: the provenance of this information i...

CVE-2005-4657: Undefined Security Weakness

Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...