168 matches found
CVE-2005-4657
Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2005-4657
The CVE-2005-4657 entry concerns Ocean12 Calendar Manager Pro 1.01, where remote attackers may bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. The description notes that provenance is unknown and details come from third-party information; no vendor-...
CVE-2005-4657
Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Ocean12 ASP Calendar Manager 1.0 - Authentication Bypass
Ocean12 ASP Calendar Manager 1.0 - Authentication Bypass source: https://www.securityfocus.com/bid/15329/info Ocean12 ASP Calendar Manager is prone to an authentication bypass vulnerability. This is due to to an access validation error in the application. The application does properly verify acce...
Ocean12 ASP Calendar Manager 1.0 - Authentication Bypass
source: https://www.securityfocus.com/bid/15329/info Ocean12 ASP Calendar Manager is prone to an authentication bypass vulnerability. This is due to to an access validation error in the application. The application does properly verify access privileges and allows the attacker to gain access to...
ocean12SQL.txt
Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: SQL injection : Ocean12 Mailing list manager PRO 1.06 Vendor: www.ocean12scripts.com Risk: High An sql injection allows anyone to login as admin using this sql query in the login panel: Adminid: Admin' UNI...
CVE-2005-1419
SQL injection vulnerability in the admin login panel for Ocean12 Mailing List Manager 1.06 allows remote attackers to execute arbitrary SQL commands via the Adminid parameter...
CVE-2005-1419
SQL injection vulnerability in the admin login panel for Ocean12 Mailing List Manager 1.06 allows remote attackers to execute arbitrary SQL commands via the Adminid parameter...
CVE-2005-1419
CVE-2005-1419 affects Ocean12 Mailing List Manager 1.06, where the admin login panel is vulnerable to SQL injection via the Admin_id parameter. The available connected documents confirm the root cause as an SQL injection flaw in the admin authentication path, enabling remote attackers to execute ...
CVE-2005-1223
Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Adminid field...
CVE-2005-1095
Cross-site scripting XSS vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to inject arbitrary web script or HTML via the page parameter...
[HSC Security Group] Ocean12 Mailing List Manager Pro SQL injection
Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: SQL injection : Ocean12 Mailing list manager PRO 1.06 Vendor: www.ocean12scripts.com Risk: High An sql injection allows anyone to login as admin using this sql query in the login panel: Adminid: Admin' UNI...
CVE-2005-1223
Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Adminid field...
CVE-2005-1223
CVE-2005-1223 describes multiple SQL injection vulnerabilities in Ocean12 Calendar Manager 1.01 allowing remote attackers to execute arbitrary SQL commands via the Admin_id field. The NVD entry rates this with a base score of 7.5 (HIGH) under CVSSv2, with network attack vector and low complexity,...
[HSC Security Group] Ocean12 Calendar manager 1.01 SQL injection
Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Product: Ocean12 Calendar manager 1.01 Site: www.ocean12scripts.com The admin login panel suffers of an sql injection that allows anyone to log in as Admin. Proof of concept: /// - Adminid: Admin' UNION ALL SELE...
ocean12_xss_and_sql_inj.txt
Content-type: Multipart/Alternative; boundary="Alt-Boundary-17843.14003556" --Alt-Boundary-17843.14003556 Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Title: Ocean12 Membership Manager Pro : XSS and Sql injection Risk: High Date: 5/04/2005 Vendor:...
CVE-2005-1095
CVE-2005-1095 affects Ocean12 Membership Manager Pro 1.x; the vulnerability is a reflected XSS in main.asp via the page parameter, enabling remote script/HTML injection. The root cause is insufficient sanitization of the page parameter. Per the provided documents, the vulnerability has a NVD CVSS...
CVE-2005-1096
SQL injection vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to execute arbitrary SQL commands via the UserID parameter...
CVE-2005-1096
CVE-2005-1096 affects Ocean12 Membership Manager Pro 1.x. A SQL injection flaw exists in the main.asp page, allowing remote attackers to inject arbitrary SQL commands through the UserID parameter. The vulnerability details are consistent across NVD/CVE records; exploitation specifics or impacted ...