CVE-2022-41390

Summary (CVE-2022-41390): OcoMon v4.0 is affected by a SQL injection vulnerability in the download.php endpoint, triggered via the cod parameter. The issue is described as affecting the ability to inject SQL through this parameter, with the CVSS v3.1 metrics indicating a critical impact (AV:N/AC:...

PT-2022-25839

Name of the Vulnerable Software and Affected Versions OcoMon version 4.0 Description A SQL injection issue was found in OcoMon via the cod parameter at the "download.php" endpoint. This allows for potential exploitation. Recommendations For OcoMon version 4.0, consider restricting access to the...

OcoMon SQL注入漏洞

OcoMon is a helpdesk system from the personal developer Rafael Foster. It is designed to manage integrated inventory control that supports tickets and computing devices. An SQL injection vulnerability exists in OcoMon version v4.0, which stems from the cod parameter in showImg.php being vulnerabl...

CVE-2022-41391

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php...

CVE-2022-41391

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php...

CVE-2022-41391: Improper Neutralization of Special Elements used in an SQL Command

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php...

CVE-2022-41390

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php...

OcoMon SQL注入漏洞

OcoMon is a helpdesk system from the personal developer Rafael Foster. It is designed to manage integrated inventory control that supports tickets and computing devices. An SQL injection vulnerability exists in OcoMon version v4.0, which stems from the cod parameter in download.php being vulnerab...

CVE-2022-41391

CVE-2022-41391 affects OcoMon v4.0, with a SQL injection in the showImg.php endpoint via the cod parameter. The root cause is unsafely handling user input in the SQL query, allowing attackers to craft requests that may compromise confidentiality, integrity, and availability (CVSS v3.1 base score ...

Ocomon 2.0 - SQL Injection

Exploit for php platform in category web applications Exploit Title: Ocomon 2.0: Acess administrative Bypass / Multiple Sql Injection Google Dork: inurl:ocomon/index.php or intitle:Ocomon 2.0-RC6 Date: 2016.08.18 Exploit Author: Jonatas Fil a.k.a pwx Vendor Homepage: ninj4c0d3r.github.io Version:...

Ocomon 2.0 - SQL Injection

Ocomon 2.0 - SQL Injection Exploit Title: Ocomon 2.0: Acess administrative Bypass / Multiple Sql Injection Google Dork: inurl:ocomon/index.php or intitle:Ocomon 2.0-RC6 Date: 2016.08.18 Exploit Author: Jonatas Fil a.k.a pwx Vendor Homepage: ninj4c0d3r.github.io Version: Latest 2.0RC6 Tested on:...

Ocomon 2.0 - SQL Injection

Exploit Title: Ocomon 2.0: Acess administrative Bypass / Multiple Sql Injection Google Dork: inurl:ocomon/index.php or intitle:Ocomon 2.0-RC6 Date: 2016.08.18 Exploit Author: Jonatas Fil a.k.a pwx Vendor Homepage: ninj4c0d3r.github.io Version: Latest 2.0RC6 Tested on: Linux And Windows CVE :...

[DCA-2011-0011] - Ocomon Multiple SQL Injection

DCA-2011-0011 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - Ocomon Vendor Product Description - The OCOMON came in March 2002 as a personal project of programmer Franque Custodio, with the initial characteristics of the registration, monitoring,...

CVE-2005-4662

The CVE-2005-4662 entry concerns OcoMon 1.20 (and possibly earlier) with multiple SQL injection vulnerabilities that may allow remote attackers to execute arbitrary SQL via an input form with unknown vectors. The description does not specify exact affected inputs, versions beyond 1.20, or concret...

CVE-2005-4663

The CVE-2005-4663 entry describes a cross-site scripting (XSS) vulnerability in OcoMon 1.20 and possibly earlier versions, allowing remote attackers to inject arbitrary web script or HTML via unknown attack vectors. The vulnerability affects the web-facing components of OcoMon, enabling potential...

CVE-2005-4664

SQL injection vulnerability in OcoMon 1.21, and possibly other versions, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the logon page, a different vulnerability than CVE-2005-4662...

CVE-2005-4663

Cross-site scripting XSS vulnerability in OcoMon 1.20, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2005-4664

CVE-2005-4664 concerns OcoMon 1.21 (and possibly earlier versions). It describes a SQL injection vulnerability that can be triggered when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL commands through the logon page. The Connected documents also indicate exploit...

CVE-2005-4662: Undefined Security Weakness

Multiple SQL injection vulnerabilities in OcoMon 1.20, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via unknown attack vectors in an unspecified input form, a different vulnerability than CVE-2005-4664...

CVE-2005-4663: Undefined Security Weakness

Cross-site scripting XSS vulnerability in OcoMon 1.20, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...