EUVD-2008-6342

Malware in sbrugna...

EUVD-2008-7022

Malware in sbrugna...

Ocean12 FAQ Manager Pro 'Keyword' Parameter Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/32526/info Ocean12 FAQ Manager Pro is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

CVE-2008-7063

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb...

Improper access control

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb...

CVE-2008-7063

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb...

CVE-2008-7063

The CVE refers to Ocean12 FAQ Manager Pro, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to access and download the database via a direct request to admin/o12faq.mdb, exposing data (confidentiality impact noted as partial). The ro...

CVE-2008-7063: Exposure of Sensitive Information to an Unauthorized Actor

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb...

Sql injection

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a Cat action. NOTE: some of these details are obtained from third party information...

CVE-2008-6372

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a Cat action. NOTE: some of these details are obtained from third party information...

CVE-2008-6372

The CVE-2008-6372 entry describes a SQL injection in Ocean12 FAQ Manager Pro 1.0. The vulnerability affects default.asp in the Cat action, where the ID parameter can be manipulated to execute arbitrary SQL commands remotely. The root cause is improper input handling leading to SQL injection. Impa...

CVE-2008-6372: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a Cat action. NOTE: some of these details are obtained from third party information...

ocean12faq-sqlxss.txt

Application: Ocean12 FAQ Manager Pro Vendor Name: Ocean12 Vendors Url: http://ocean12tech.com/ Bug Type: Ocean12 FAQ Manager Pro SQL,XSS Multiple Vulnerabilities Exploitation: Remote Google Dork: "Maintained with the Ocean12 FAQ Manager Pro" SQL POC...

ocean12faq-blindsql.txt

--------------------------------------------------------- Portal Name: Ocean12 FAQ Manager Pro Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Blind Sql Injection --------------------------------------------------------- Exploit : site.com/?Action=Cat&ID=40%20and%201=1 true...

Ocean12 FAQ Manager Pro (ID) Blind SQL Injection Vulnerabillity

No description provided by source. --------------------------------------------------------- Portal Name: Ocean12 FAQ Manager Pro Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Blind Sql Injection --------------------------------------------------------- Exploit :...

ocean12faq-disclose.txt

--------------------------------------------------------- Portal Name: Ocean12 FAQ Manager Pro Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Database Disclosure Vulnerability --------------------------------------------------------- XPL : http://site.com/path//admin/o12faq.mdb De...

Ocean12 FAQ Manager Pro - 'Keyword' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32526/info Ocean12 FAQ Manager Pro is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user i...

Ocean12 FAQ Manager Pro - 'ID' Blind SQL Injection

--------------------------------------------------------- Portal Name: Ocean12 FAQ Manager Pro Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Blind Sql Injection --------------------------------------------------------- Exploit : site.com/?Action=Cat&ID=40%20and%201=1 true...

Ocean12 FAQ Manager Pro Database Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: Ocean12 FAQ Manager Pro Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Database Disclosure Vulnerability --------------------------------------------------------- XPL :...

Ocean12 FAQ Manager Pro (ID) Blind SQL Injection Vulnerabillity

Exploit for unknown platform in category web applications =============================================================== Ocean12 FAQ Manager Pro ID Blind SQL Injection Vulnerabillity ===============================================================...