CVE-2008-6371

Ocean12 Membership Manager Pro is affected by an SQL injection in login.asp triggered by the Username parameter. The vulnerability arises from insufficient sanitization of user-supplied data, enabling remote attackers to craft input that causes arbitrary SQL execution. This aligns with multiple r...

CVE-2008-6370

CVE-2008-6370 : XSS in Ocean12 Contact Manager Pro 1.02 (default.asp) via the DisplayFormat parameter. Remote attackers can inject arbitrary script/HTML. No exploitation details or patch information are provided in the supplied documents.

CVE-2008-6372

The CVE-2008-6372 entry describes a SQL injection in Ocean12 FAQ Manager Pro 1.0. The vulnerability affects default.asp in the Cat action, where the ID parameter can be manipulated to execute arbitrary SQL commands remotely. The root cause is improper input handling leading to SQL injection. Impa...

CVE-2008-6390

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6370

Cross-site scripting XSS vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to inject arbitrary web script or HTML via the DisplayFormat parameter...

CVE-2008-6390

CVE-2008-6390 describes an SQL injection vulnerability in login.asp of Ocean12 Membership Manager Pro. The vulnerability allows remote attackers to execute arbitrary SQL commands via the Password parameter. The primary source notes that the provenance of the information is from third‑party data. ...

CVE-2008-6371

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username Username parameter...

CVE-2008-6369

SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbitrary SQL commands via the Sort parameter...

CVE-2008-6369

The CVE-2008-6369 entry concerns a SQL injection in Ocean12 Contact Manager Pro 1.02. The affected component is default.asp, where the Sort parameter enables remote attackers to execute arbitrary SQL commands. The language in the connected records confirms the vulnerability class and affected pro...

DesignerfreeSolutions Newsletter Manager Pro Auth Bypass Vuln

Exploit for unknown platform in category web applications ============================================================= DesignerfreeSolutions Newsletter Manager Pro Auth Bypass Vuln ============================================================= @email protected @=Script :Newsletter Manager...

CVE-2008-5649

SQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-5649

CVE-2008-5649 describes an SQL injection vulnerability in AlstraSoft Article Manager Pro 1.6, specifically in admin/admin.php where the username parameter can be manipulated to execute arbitrary SQL commands. Documented impact indicates remote attackers could achieve complete confidentiality, int...

ocean12faq-blindsql.txt

--------------------------------------------------------- Portal Name: Ocean12 FAQ Manager Pro Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Blind Sql Injection --------------------------------------------------------- Exploit : site.com/?Action=Cat&ID=40%20and%201=1 true...

ocean12faq-sqlxss.txt

Application: Ocean12 FAQ Manager Pro Vendor Name: Ocean12 Vendors Url: http://ocean12tech.com/ Bug Type: Ocean12 FAQ Manager Pro SQL,XSS Multiple Vulnerabilities Exploitation: Remote Google Dork: "Maintained with the Ocean12 FAQ Manager Pro" SQL POC...

Ocean12 (Multiple Products) - Admin_ID SQL Injection

Ocean12 Multiple Products - AdminID SQL Injection source: https://www.securityfocus.com/bid/32527/info Multiple Ocean12 products are prone to an SQL-injection vulnerability because they fail to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the...

Ocean12 FAQ Manager Pro (ID) Blind SQL Injection Vulnerabillity

No description provided by source. --------------------------------------------------------- Portal Name: Ocean12 FAQ Manager Pro Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Blind Sql Injection --------------------------------------------------------- Exploit :...

Ocean12 (Multiple Products) - 'Admin_ID' SQL Injection

source: https://www.securityfocus.com/bid/32527/info Multiple Ocean12 products are prone to an SQL-injection vulnerability because they fail to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit...

ocean12cm-sqlxss.txt

--------------------------------------------------------- Portal Name: Ocean12 Contact Manager Pro Version : 1.02 Vendor : http://ocean12tech.com/products/contact Dork: Maintained with the Ocean12 Contact Manager Pro v1.02 Author : PouyaServer , [email protected] Vulnerability : SQL,XSS...

Ocean12 FAQ Manager Pro - 'Keyword' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32526/info Ocean12 FAQ Manager Pro is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user i...

Ocean12 Contact Manager Pro (SQL/XSS/DDV) Multiple Vulnerabilities

No description provided by source. --------------------------------------------------------- Portal Name: Ocean12 Contact Manager Pro Version : 1.02 Vendor : http://ocean12tech.com/products/contact Dork: Maintained with the Ocean12 Contact Manager Pro v1.02 Author : PouyaServer ,...