CVE-2005-1419

SQL injection vulnerability in the admin login panel for Ocean12 Mailing List Manager 1.06 allows remote attackers to execute arbitrary SQL commands via the Adminid parameter...

EUVD-2005-1422

Malware in sbrugna...

EUVD-2008-5949

Malware in sbrugna...

EUVD-2008-5948

Malware in sbrugna...

Ocean12 Mailing LisManager Gold 2.04 'Email' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/32528/info Ocean12 Mailing List Manager Gold is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the applicatio...

Sql injection

Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary SQL commands via the Email parameter to 1 default.asp and 2 sedit.asp...

Improper access control

Ocean12 Mailing List Manager Gold stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for o12mail.mdb...

CVE-2008-5980

Ocean12 Mailing List Manager Gold stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for o12mail.mdb...

CVE-2008-5979

Cross-site scripting XSS vulnerability in default.asp in Ocean12 Mailing List Manager Gold allows remote attackers to inject arbitrary web script or HTML via the Email parameter...

CVE-2008-5979

CVE-2008-5979 describes a cross-site scripting (XSS) vulnerability in default.asp of Ocean12 Mailing List Manager Gold. The flaw allows remote attackers to inject arbitrary web script or HTML via the Email parameter, enabling potential session hijacking or defacement depending on the context and ...

CVE-2008-5978

CVE-2008-5978 affects Ocean12 Mailing List Manager Gold. The vulnerability is a SQL injection in the Email parameter for two pages (default.asp and s_edit.asp), allowing remote attackers to execute arbitrary SQL commands. The issue is caused by unsafely concatenating user input into SQL queries, ...

CVE-2008-5980

Ocean12 Mailing List Manager Gold stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for o12mail.mdb...

Ocean12 Mailing List Manager Gold (DD/SQL/XSS) Vulnerabilities

No description provided by source. --------------------------------------------------------- Portal Name: Ocean12 Mailing List Manager Gold Vendor : http://ocean12tech.com/products/o12mailgold Author : PouyaServer , [email protected] Vulnerability : DD,SQL,XSS...

Ocean12 Mailing List Manager Gold - File Disclosure SQL Injection Cross-Site Scripting

Ocean12 Mailing List Manager Gold - File Disclosure SQL Injection Cross-Site Scripting --------------------------------------------------------- Portal Name: Ocean12 Mailing List Manager Gold Vendor : http://ocean12tech.com/products/o12mailgold Author : PouyaServer , [email protected]...

Ocean12 Mailing List Manager Gold - File Disclosure / SQL Injection / Cross-Site Scripting

--------------------------------------------------------- Portal Name: Ocean12 Mailing List Manager Gold Vendor : http://ocean12tech.com/products/o12mailgold Author : PouyaServer , [email protected] Vulnerability : DD,SQL,XSS --------------------------------------------------------- DD:...

Ocean12 Mailing List Manager Gold (DD/SQL/XSS) Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== Ocean12 Mailing List Manager Gold DD/SQL/XSS Vulnerabilities ==============================================================...

Ocean12 Mailing LisManager Gold 2.04 - 'Email' SQL Injection

source: https://www.securityfocus.com/bid/32528/info Ocean12 Mailing List Manager Gold is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or explo...

ocean12mlmg-sql.txt

Application: Ocean12 Mailing List Manager Gold Vendor Name: Ocean12 Vendors Url: http://ocean12tech.com/ Bug Type: Ocean12 Mailing List Manager Gold SQL Injection vulnerability Exploitation: Remote Google Dork: "Maintained with the Ocean12 Mailing List Manager Gold" Example...

Ocean12 Mailing LisManager Gold 2.04 - Email SQL Injection

Ocean12 Mailing LisManager Gold 2.04 - Email SQL Injection source: https://www.securityfocus.com/bid/32528/info Ocean12 Mailing List Manager Gold is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to...

ocean12SQL.txt

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: SQL injection : Ocean12 Mailing list manager PRO 1.06 Vendor: www.ocean12scripts.com Risk: High An sql injection allows anyone to login as admin using this sql query in the login panel: Adminid: Admin' UNI...