Ocomon 2.0 - SQL Injection

Exploit for php platform in category web applications Exploit Title: Ocomon 2.0: Acess administrative Bypass / Multiple Sql Injection Google Dork: inurl:ocomon/index.php or intitle:Ocomon 2.0-RC6 Date: 2016.08.18 Exploit Author: Jonatas Fil a.k.a pwx Vendor Homepage: ninj4c0d3r.github.io Version:...

Ocomon 2.0 - SQL Injection

Exploit Title: Ocomon 2.0: Acess administrative Bypass / Multiple Sql Injection Google Dork: inurl:ocomon/index.php or intitle:Ocomon 2.0-RC6 Date: 2016.08.18 Exploit Author: Jonatas Fil a.k.a pwx Vendor Homepage: ninj4c0d3r.github.io Version: Latest 2.0RC6 Tested on: Linux And Windows CVE :...

[DCA-2011-0011] - Ocomon Multiple SQL Injection

DCA-2011-0011 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - Ocomon Vendor Product Description - The OCOMON came in March 2002 as a personal project of programmer Franque Custodio, with the initial characteristics of the registration, monitoring,...

CVE-2005-4663

The CVE-2005-4663 entry describes a cross-site scripting (XSS) vulnerability in OcoMon 1.20 and possibly earlier versions, allowing remote attackers to inject arbitrary web script or HTML via unknown attack vectors. The vulnerability affects the web-facing components of OcoMon, enabling potential...

CVE-2005-4664

CVE-2005-4664 concerns OcoMon 1.21 (and possibly earlier versions). It describes a SQL injection vulnerability that can be triggered when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL commands through the logon page. The Connected documents also indicate exploit...

CVE-2005-4664

SQL injection vulnerability in OcoMon 1.21, and possibly other versions, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the logon page, a different vulnerability than CVE-2005-4662...

CVE-2005-4663

Cross-site scripting XSS vulnerability in OcoMon 1.20, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2005-4662

The CVE-2005-4662 entry concerns OcoMon 1.20 (and possibly earlier) with multiple SQL injection vulnerabilities that may allow remote attackers to execute arbitrary SQL via an input form with unknown vectors. The description does not specify exact affected inputs, versions beyond 1.20, or concret...

CVE-2005-4664

SQL injection vulnerability in OcoMon 1.21, and possibly other versions, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the logon page, a different vulnerability than CVE-2005-4662...

CVE-2005-4663

Cross-site scripting XSS vulnerability in OcoMon 1.20, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2005-4662

Multiple SQL injection vulnerabilities in OcoMon 1.20, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via unknown attack vectors in an unspecified input form, a different vulnerability than CVE-2005-4664...

[SA17470] OcoMon Unspecified SQL Injection Vulnerabilities

TITLE: OcoMon Unspecified SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17470 VERIFY ADVISORY: http://secunia.com/advisories/17470/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: OcoMon 1.x http://secunia.com/product/6092/ DESCRIPTION: Some...