CVE-2006-2265

The CVE-2006-2265 entry concerns a Cross-site Scripting vulnerability in the admin/main.asp page of Ocean12 Calendar Manager Pro 1.00. The vulnerability is triggered via the date parameter, enabling remote attackers to inject arbitrary script/HTML. Documented impact is limited to partial integrit...

CVE-2006-2264

CVE-2006-2264 affects Ocean12 Calendar Manager Pro 1.00, with multiple SQL injection vulnerabilities that allow a remote attacker to execute arbitrary SQL commands via (1) date parameter to admin/main.asp, (2) SearchFor parameter to admin/view.asp, or (3) ID parameter to admin/edit.asp. The explo...

CVE-2006-2265: Undefined Security Weakness

Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-2264: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary SQL commands via the 1 date parameter to admin/main.asp, 2 SearchFor parameter to admin/view.asp, or 3 ID parameter to admin/edit.asp. NOTE: the provenance of this information i...