CVE-2005-4663: Undefined Security Weakness

Cross-site scripting XSS vulnerability in OcoMon 1.20, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2005-4662: Undefined Security Weakness

Multiple SQL injection vulnerabilities in OcoMon 1.20, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via unknown attack vectors in an unspecified input form, a different vulnerability than CVE-2005-4664...

CVE-2005-4663

Cross-site scripting XSS vulnerability in OcoMon 1.20, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2005-4664

SQL injection vulnerability in OcoMon 1.21, and possibly other versions, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the logon page, a different vulnerability than CVE-2005-4662...

CVE-2005-4662

Multiple SQL injection vulnerabilities in OcoMon 1.20, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via unknown attack vectors in an unspecified input form, a different vulnerability than CVE-2005-4664...

[SA17470] OcoMon Unspecified SQL Injection Vulnerabilities

TITLE: OcoMon Unspecified SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17470 VERIFY ADVISORY: http://secunia.com/advisories/17470/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: OcoMon 1.x http://secunia.com/product/6092/ DESCRIPTION: Some...