CVE-2020-9461

CVE-2020-9461 affects Octech Oempro 4.7–4.11. The vulnerability is a stored XSS that is exploitable by an authenticated user via the FolderName parameter of the Media.CreateFolder command. The issue is documented across multiple sources (NVD entry for CVE-2020-9461, Red Hat advisory, CNVD entries...

CVE-2020-9461

Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable...

CVE-2020-9460

Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignName in Campaign.Create is vulnerable...

CVE-2020-9460

CVE-2020-9460 / CVE-2020-9461 pertain to Octech Oempro 4.7–4.11. The vulnerability is an authenticated XSS in Octech Oempro’s web interface: specifically, the Campaign.Create command’s CampaignName parameter (CVE-2020-9460) and, in the stored variant, the Media.CreateFolder command’s FolderName p...

Octeth Oempro 4.8 SQL Injection

Exploit Title: Octeth Oempro 4.8 - 'CampaignID' SQL Injection Date: 2020-01-27 Exploit Author: Bruno de Barros Bulle www.xlabs.com.br Vendor Homepage: www2.octeth.com Version: Octeth Oempro v.4.7 and v.4.8 Tested on: Oempro v.4.7 CVE : CVE-2019-19740 An authenticated user can easily exploit this...

Octeth Oempro 4.8 - 'CampaignID' SQL Injection

Exploit Title: Octeth Oempro 4.8 - 'CampaignID' SQL Injection Date: 2020-01-27 Exploit Author: Bruno de Barros Bulle www.xlabs.com.br Vendor Homepage: www2.octeth.com Version: Octeth Oempro v.4.7 and v.4.8 Tested on: Oempro v.4.7 CVE : CVE-2019-19740 An authenticated user can easily exploit this...

Octeth Oempro 4.8 - (CampaignID) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Octeth Oempro 4.8 - 'CampaignID' SQL Injection Exploit Author: Bruno de Barros Bulle www.xlabs.com.br Vendor Homepage: www2.octeth.com Version: Octeth Oempro v.4.7 and v.4.8 Tested on: Oempro v.4.7 CVE : CVE-2019-19740 An...

Octeth Oempro 4.8 - CampaignID SQL Injection

Octeth Oempro 4.8 - CampaignID SQL Injection Exploit Title: Octeth Oempro 4.8 - 'CampaignID' SQL Injection Date: 2020-01-27 Exploit Author: Bruno de Barros Bulle www.xlabs.com.br Vendor Homepage: www2.octeth.com Version: Octeth Oempro v.4.7 and v.4.8 Tested on: Oempro v.4.7 CVE : CVE-2019-19740 A...

Octeth Oempro SQL Injection Vulnerability

Octeth Oempro is a suite of email marketing software from Octeth USA. An SQL injection vulnerability exists in the 'CampaignID' parameter of Campaign.Get in Octeth Oempro version 4.7. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...

CVE-2019-19740

Octeth Oempro 4.7 and 4.8 allow SQL injection. The parameter CampaignID in Campaign.Get is vulnerable...

CVE-2019-19740

Octeth Oempro 4.7 and 4.8 allow SQL injection. The parameter CampaignID in Campaign.Get is vulnerable...

Sql injection

Octeth Oempro 4.7 and 4.8 allow SQL injection. The parameter CampaignID in Campaign.Get is vulnerable...

CVE-2019-19740

Octeth Oempro 4.7–4.8 contains a SQL injection in the Campaign.Get endpoint via the CampaignID parameter. The issue allows an attacker to inject SQL, with exploitation demonstrated in public advisories and exploits showing authenticated access can trigger the vulnerability. Impact is described as...

CVE-2019-19740

Octeth Oempro 4.7 and 4.8 allow SQL injection. The parameter CampaignID in Campaign.Get is vulnerable...

PT-2019-15940 · Octeth · Octeth Oempro

Name of the Vulnerable Software and Affected Versions: Octeth Oempro versions 4.7 through 4.8 Description: The issue allows SQL injection. The parameter CampaignID in the Campaign.Get endpoint is vulnerable. Recommendations: For versions 4.7 and 4.8, avoid using the CampaignID parameter in the...

Octeth Oempro 3.5.5 Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/32784/info Octeth Oempro is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

OemPro 3.6.4 - Multiple Vulnerabilities

No description provided by source. Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: [email protected] Path disclosure:...

OemPro v3.6.4 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: email protected Path...

OemPro 3.6.4 - Multiple Vulnerabilities

OemPro 3.6.4 - Multiple Vulnerabilities Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: [email protected] Path disclosure:...

OemPro 3.6.4 - Multiple Vulnerabilities

Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: [email protected] Path disclosure: http://localhost/clibounce.php FCKEditor 2.3.2...