84 matches found
CVE-2006-2264
Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary SQL commands via the 1 date parameter to admin/main.asp, 2 SearchFor parameter to admin/view.asp, or 3 ID parameter to admin/edit.asp. NOTE: the provenance of this information i...
CVE-2006-2264
CVE-2006-2264 affects Ocean12 Calendar Manager Pro 1.00, with multiple SQL injection vulnerabilities that allow a remote attacker to execute arbitrary SQL commands via (1) date parameter to admin/main.asp, (2) SearchFor parameter to admin/view.asp, or (3) ID parameter to admin/edit.asp. The explo...
CVE-2006-2265
The CVE-2006-2265 entry concerns a Cross-site Scripting vulnerability in the admin/main.asp page of Ocean12 Calendar Manager Pro 1.00. The vulnerability is triggered via the date parameter, enabling remote attackers to inject arbitrary script/HTML. Documented impact is limited to partial integrit...
CVE-2006-2265
Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Ocean12 Technologies Calendar Manager Pro 1.0 1 - adminmain.asp?date SQL Injection
Ocean12 Technologies Calendar Manager Pro 1.0 1 - adminmain.asp?date SQL Injection source: https://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issu...
Ocean12 Technologies Calendar Manager Pro 1.0 1 - adminview.asp?searchFor SQL Injection
Ocean12 Technologies Calendar Manager Pro 1.0 1 - adminview.asp?searchFor SQL Injection source: https://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These...
Ocean12 Technologies Calendar Manager Pro 1.0 1 - '/admin/edit.asp?ID' SQL Injection
source: https://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...
Ocean12 Technologies Calendar Manager Pro 1.0 1 - '/admin/view.asp?searchFor' SQL Injection
source: https://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...
CVE-2005-4657
Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2005-4657
The CVE-2005-4657 entry concerns Ocean12 Calendar Manager Pro 1.01, where remote attackers may bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. The description notes that provenance is unknown and details come from third-party information; no vendor-...
CVE-2005-4657
Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Ocean12 ASP Calendar Manager 1.0 - Authentication Bypass
Ocean12 ASP Calendar Manager 1.0 - Authentication Bypass source: https://www.securityfocus.com/bid/15329/info Ocean12 ASP Calendar Manager is prone to an authentication bypass vulnerability. This is due to to an access validation error in the application. The application does properly verify acce...
Ocean12 ASP Calendar Manager 1.0 - Authentication Bypass
source: https://www.securityfocus.com/bid/15329/info Ocean12 ASP Calendar Manager is prone to an authentication bypass vulnerability. This is due to to an access validation error in the application. The application does properly verify access privileges and allows the attacker to gain access to...
CVE-2005-1223
Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Adminid field...
CVE-2005-1223
CVE-2005-1223 describes multiple SQL injection vulnerabilities in Ocean12 Calendar Manager 1.01 allowing remote attackers to execute arbitrary SQL commands via the Admin_id field. The NVD entry rates this with a base score of 7.5 (HIGH) under CVSSv2, with network attack vector and low complexity,...
CVE-2005-1223
Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Adminid field...
[HSC Security Group] Ocean12 Calendar manager 1.01 SQL injection
Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Product: Ocean12 Calendar manager 1.01 Site: www.ocean12scripts.com The admin login panel suffers of an sql injection that allows anyone to log in as Admin. Proof of concept: /// - Adminid: Admin' UNION ALL SELE...
HP-UX PHSS_19483 : HPSBUX9908-102 Security Vulnerability in rpc.cmsd (rev.2)
s700800 11.00 CDE Runtime AUG 99 Cumulative Patch : Buffer overflow vulnerability in the CDE Calendar Manager Service Daemon, rpc.cmsd. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS19483. The text itself...
Solaris 7 (x86) : 107023-11
CDE 1.3x86: Calendar Manager patch. Date this patch was last updated by Sun : Sep/21/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Solaris 2.6 (x86) : 105567-13
CDE 1.2x86: calendar manager patch. Date this patch was last updated by Sun : Apr/01/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...