Lucene search
+L

84 matches found

Cvelist
Cvelist
added 2006/05/09 10:0 a.m.20 views

CVE-2006-2264

Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary SQL commands via the 1 date parameter to admin/main.asp, 2 SearchFor parameter to admin/view.asp, or 3 ID parameter to admin/edit.asp. NOTE: the provenance of this information i...

8.2AI score0.01143EPSS
SaveExploits4References7
CVE
CVE
added 2006/05/09 10:0 a.m.64 views

CVE-2006-2264

CVE-2006-2264 affects Ocean12 Calendar Manager Pro 1.00, with multiple SQL injection vulnerabilities that allow a remote attacker to execute arbitrary SQL commands via (1) date parameter to admin/main.asp, (2) SearchFor parameter to admin/view.asp, or (3) ID parameter to admin/edit.asp. The explo...

6.5CVSS8.2AI score0.01143EPSS
SaveExploits4References7Affected Software1
CVE
CVE
added 2006/05/09 10:0 a.m.55 views

CVE-2006-2265

The CVE-2006-2265 entry concerns a Cross-site Scripting vulnerability in the admin/main.asp page of Ocean12 Calendar Manager Pro 1.00. The vulnerability is triggered via the date parameter, enabling remote attackers to inject arbitrary script/HTML. Documented impact is limited to partial integrit...

2.6CVSS6AI score0.02008EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
added 2006/05/09 10:0 a.m.19 views

CVE-2006-2265

Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

6AI score0.02008EPSS
SaveExploits2References5
exploitpack
exploitpack
added 2006/05/08 12:0 a.m.13 views

Ocean12 Technologies Calendar Manager Pro 1.0 1 - adminmain.asp?date SQL Injection

Ocean12 Technologies Calendar Manager Pro 1.0 1 - adminmain.asp?date SQL Injection source: https://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issu...

0.9AI score
SaveExploits0
exploitpack
exploitpack
added 2006/05/08 12:0 a.m.13 views

Ocean12 Technologies Calendar Manager Pro 1.0 1 - adminview.asp?searchFor SQL Injection

Ocean12 Technologies Calendar Manager Pro 1.0 1 - adminview.asp?searchFor SQL Injection source: https://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These...

0.8AI score
SaveExploits0
Exploit DB
Exploit DB
added 2006/05/08 12:0 a.m.40 views

Ocean12 Technologies Calendar Manager Pro 1.0 1 - '/admin/edit.asp?ID' SQL Injection

source: https://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

6.5CVSS5.8AI score0.01143EPSS
SaveExploits4
Exploit DB
Exploit DB
added 2006/05/08 12:0 a.m.19 views

Ocean12 Technologies Calendar Manager Pro 1.0 1 - '/admin/view.asp?searchFor' SQL Injection

source: https://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

6.5CVSS5.8AI score0.01143EPSS
SaveExploits4
Cvelist
Cvelist
added 2006/01/16 9:0 p.m.22 views

CVE-2005-4657

Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

6.5AI score0.02969EPSS
SaveExploits2References1
CVE
CVE
added 2006/01/16 9:0 p.m.51 views

CVE-2005-4657

The CVE-2005-4657 entry concerns Ocean12 Calendar Manager Pro 1.01, where remote attackers may bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. The description notes that provenance is unknown and details come from third-party information; no vendor-...

7.5CVSS6.9AI score0.02969EPSS
SaveExploits2References1Affected Software1
NVD
NVD
added 2005/12/31 5:0 a.m.18 views

CVE-2005-4657

Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

7.5CVSS6.5AI score0.02969EPSS
SaveExploits2References1
exploitpack
exploitpack
added 2005/11/04 12:0 a.m.16 views

Ocean12 ASP Calendar Manager 1.0 - Authentication Bypass

Ocean12 ASP Calendar Manager 1.0 - Authentication Bypass source: https://www.securityfocus.com/bid/15329/info Ocean12 ASP Calendar Manager is prone to an authentication bypass vulnerability. This is due to to an access validation error in the application. The application does properly verify acce...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2005/11/04 12:0 a.m.20 views

Ocean12 ASP Calendar Manager 1.0 - Authentication Bypass

source: https://www.securityfocus.com/bid/15329/info Ocean12 ASP Calendar Manager is prone to an authentication bypass vulnerability. This is due to to an access validation error in the application. The application does properly verify access privileges and allows the attacker to gain access to...

7.5CVSS5.8AI score0.02969EPSS
SaveExploits2
NVD
NVD
added 2005/05/02 4:0 a.m.17 views

CVE-2005-1223

Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Adminid field...

7.5CVSS8.5AI score0.01157EPSS
SaveExploits2References4
CVE
CVE
added 2005/04/22 4:0 a.m.57 views

CVE-2005-1223

CVE-2005-1223 describes multiple SQL injection vulnerabilities in Ocean12 Calendar Manager 1.01 allowing remote attackers to execute arbitrary SQL commands via the Admin_id field. The NVD entry rates this with a base score of 7.5 (HIGH) under CVSSv2, with network attack vector and low complexity,...

7.5CVSS8.9AI score0.01157EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
added 2005/04/22 4:0 a.m.24 views

CVE-2005-1223

Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Adminid field...

8.5AI score0.01157EPSS
SaveExploits2References4
securityvulns
securityvulns
added 2005/04/20 12:0 a.m.46 views

[HSC Security Group] Ocean12 Calendar manager 1.01 SQL injection

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Product: Ocean12 Calendar manager 1.01 Site: www.ocean12scripts.com The admin login panel suffers of an sql injection that allows anyone to log in as Admin. Proof of concept: /// - Adminid: Admin' UNION ALL SELE...

SaveExploits0
Tenable Nessus
Tenable Nessus
added 2005/02/16 12:0 a.m.26 views

HP-UX PHSS_19483 : HPSBUX9908-102 Security Vulnerability in rpc.cmsd (rev.2)

s700800 11.00 CDE Runtime AUG 99 Cumulative Patch : Buffer overflow vulnerability in the CDE Calendar Manager Service Daemon, rpc.cmsd. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS19483. The text itself...

5.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2004/07/12 12:0 a.m.18 views

Solaris 7 (x86) : 107023-11

CDE 1.3x86: Calendar Manager patch. Date this patch was last updated by Sun : Sep/21/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

0.1AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2004/07/12 12:0 a.m.19 views

Solaris 2.6 (x86) : 105567-13

CDE 1.2x86: calendar manager patch. Date this patch was last updated by Sun : Apr/01/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

0.1AI score
SaveExploits0References1
Rows per page
Query Builder