OcoMon SQL Injection Vulnerability

OcoMon is a helpdesk system from the personal developer Rafael Foster. It is designed to manage integrated inventory control that supports tickets and computing devices. An SQL injection vulnerability exists in OcoMon version v4.0, which stems from the cod parameter in showImg.php being vulnerabl...

OcoMon SQL Injection Vulnerability

OcoMon is a helpdesk system from the personal developer Rafael Foster. It is designed to manage integrated inventory control that supports tickets and computing devices. An SQL injection vulnerability exists in OcoMon version v4.0, which stems from the cod parameter in download.php being vulnerab...

PT-2022-25840 · Ocomon · Ocomon

Name of the Vulnerable Software and Affected Versions: OcoMon version 4.0 Description: A SQL injection issue was discovered in OcoMon via the cod parameter at the "showImg.php" endpoint. This allows for potential exploitation of the database. Recommendations: For OcoMon version 4.0, consider...

CVE-2022-41391: Improper Neutralization of Special Elements used in an SQL Command

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php...

CVE-2022-41391

CVE-2022-41391 affects OcoMon v4.0, with a SQL injection in the showImg.php endpoint via the cod parameter. The root cause is unsafely handling user input in the SQL query, allowing attackers to craft requests that may compromise confidentiality, integrity, and availability (CVSS v3.1 base score ...

CVE-2022-41391

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php...

CVE-2022-41390

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php...

CVE-2022-41391

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php...

CVE-2022-41391

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php...

CVE-2022-41390

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php...

Ocomon 2.0 - SQL Injection

Exploit for php platform in category web applications Exploit Title: Ocomon 2.0: Acess administrative Bypass / Multiple Sql Injection Google Dork: inurl:ocomon/index.php or intitle:Ocomon 2.0-RC6 Date: 2016.08.18 Exploit Author: Jonatas Fil a.k.a pwx Vendor Homepage: ninj4c0d3r.github.io Version:...

Ocomon 2.0 - SQL Injection

Ocomon 2.0 - SQL Injection Exploit Title: Ocomon 2.0: Acess administrative Bypass / Multiple Sql Injection Google Dork: inurl:ocomon/index.php or intitle:Ocomon 2.0-RC6 Date: 2016.08.18 Exploit Author: Jonatas Fil a.k.a pwx Vendor Homepage: ninj4c0d3r.github.io Version: Latest 2.0RC6 Tested on:...

Ocomon 2.0 - SQL Injection

Exploit Title: Ocomon 2.0: Acess administrative Bypass / Multiple Sql Injection Google Dork: inurl:ocomon/index.php or intitle:Ocomon 2.0-RC6 Date: 2016.08.18 Exploit Author: Jonatas Fil a.k.a pwx Vendor Homepage: ninj4c0d3r.github.io Version: Latest 2.0RC6 Tested on: Linux And Windows CVE :...

[DCA-2011-0011] - Ocomon Multiple SQL Injection

DCA-2011-0011 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - Ocomon Vendor Product Description - The OCOMON came in March 2002 as a personal project of programmer Franque Custodio, with the initial characteristics of the registration, monitoring,...

CVE-2005-4663

The CVE-2005-4663 entry describes a cross-site scripting (XSS) vulnerability in OcoMon 1.20 and possibly earlier versions, allowing remote attackers to inject arbitrary web script or HTML via unknown attack vectors. The vulnerability affects the web-facing components of OcoMon, enabling potential...

CVE-2005-4664

CVE-2005-4664 concerns OcoMon 1.21 (and possibly earlier versions). It describes a SQL injection vulnerability that can be triggered when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL commands through the logon page. The Connected documents also indicate exploit...

CVE-2005-4663

Cross-site scripting XSS vulnerability in OcoMon 1.20, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2005-4664

SQL injection vulnerability in OcoMon 1.21, and possibly other versions, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the logon page, a different vulnerability than CVE-2005-4662...

CVE-2005-4662

The CVE-2005-4662 entry concerns OcoMon 1.20 (and possibly earlier) with multiple SQL injection vulnerabilities that may allow remote attackers to execute arbitrary SQL via an input form with unknown vectors. The description does not specify exact affected inputs, versions beyond 1.20, or concret...

CVE-2005-4664: Undefined Security Weakness

SQL injection vulnerability in OcoMon 1.21, and possibly other versions, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the logon page, a different vulnerability than CVE-2005-4662...