Ocean12 Membership Manager Pro 'login.asp' SQL Injection Vulnerability

Ocean12 Membership Manager Pro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

Sql injection

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username Username parameter...

CVE-2008-6390

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6371

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username Username parameter...

CVE-2008-6371

Ocean12 Membership Manager Pro is affected by an SQL injection in login.asp triggered by the Username parameter. The vulnerability arises from insufficient sanitization of user-supplied data, enabling remote attackers to craft input that causes arbitrary SQL execution. This aligns with multiple r...

CVE-2008-6390

CVE-2008-6390 describes an SQL injection vulnerability in login.asp of Ocean12 Membership Manager Pro. The vulnerability allows remote attackers to execute arbitrary SQL commands via the Password parameter. The primary source notes that the provenance of the information is from third‑party data. ...

CVE-2008-6371

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username Username parameter...

CVE-2008-6390

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6362

SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6362

The CVE-2008-6362 entry describes a SQL injection vulnerability in sitepage.php of the Multiple Membership Script 2.5, exploitable by remote attackers via the id parameter. Impact per CVSS v2 is partial confidentiality, integrity, and availability with NETWORK attack vector, LOW complexity, and n...

CVE-2008-6362

SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6362: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in sitepage.php in Multiple Membership Script 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6390: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6371: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username Username parameter...

Google launching members-only security forum

internetnews.com’s Kenneth Corbin has the scoop on plans by Google to launch a members-only security forum for businesses, law enforcement, government agencies and others to combat malware and fraud on the Web. In addition to Google, the Internet Security Community will draw participation from...

Sql injection

SQL injection vulnerability in account.asp in Active Membership 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information...

CVE-2008-5635

SQL injection vulnerability in account.asp in Active Membership 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information...

CVE-2008-5635

CVE-2008-5635 is a SQL injection vulnerability in Active Membership 2.0 disclosed via account.asp where the (1) username and (2) password parameters can be manipulated to execute arbitrary SQL commands, potentially related to start.asp. The NVD entry assigns a CVSS v2 base score of 7.5 (HIGH) wit...