55 matches found
CVE-2020-9460
CVE-2020-9460 / CVE-2020-9461 pertain to Octech Oempro 4.7–4.11. The vulnerability is an authenticated XSS in Octech Oempro’s web interface: specifically, the Campaign.Create command’s CampaignName parameter (CVE-2020-9460) and, in the stored variant, the Media.CreateFolder command’s FolderName p...
CVE-2020-9460
Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignName in Campaign.Create is vulnerable...
Octeth Oempro 4.8 - (CampaignID) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Octeth Oempro 4.8 - 'CampaignID' SQL Injection Exploit Author: Bruno de Barros Bulle www.xlabs.com.br Vendor Homepage: www2.octeth.com Version: Octeth Oempro v.4.7 and v.4.8 Tested on: Oempro v.4.7 CVE : CVE-2019-19740 An...
Octeth Oempro 4.8 - CampaignID SQL Injection
Octeth Oempro 4.8 - CampaignID SQL Injection Exploit Title: Octeth Oempro 4.8 - 'CampaignID' SQL Injection Date: 2020-01-27 Exploit Author: Bruno de Barros Bulle www.xlabs.com.br Vendor Homepage: www2.octeth.com Version: Octeth Oempro v.4.7 and v.4.8 Tested on: Oempro v.4.7 CVE : CVE-2019-19740 A...
Octeth Oempro 4.8 SQL Injection
Exploit Title: Octeth Oempro 4.8 - 'CampaignID' SQL Injection Date: 2020-01-27 Exploit Author: Bruno de Barros Bulle www.xlabs.com.br Vendor Homepage: www2.octeth.com Version: Octeth Oempro v.4.7 and v.4.8 Tested on: Oempro v.4.7 CVE : CVE-2019-19740 An authenticated user can easily exploit this...
Octeth Oempro 4.8 - 'CampaignID' SQL Injection
Exploit Title: Octeth Oempro 4.8 - 'CampaignID' SQL Injection Date: 2020-01-27 Exploit Author: Bruno de Barros Bulle www.xlabs.com.br Vendor Homepage: www2.octeth.com Version: Octeth Oempro v.4.7 and v.4.8 Tested on: Oempro v.4.7 CVE : CVE-2019-19740 An authenticated user can easily exploit this...
Octeth Oempro SQL Injection Vulnerability
Octeth Oempro is a suite of email marketing software from Octeth USA. An SQL injection vulnerability exists in the 'CampaignID' parameter of Campaign.Get in Octeth Oempro version 4.7. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...
CVE-2019-19740
Octeth Oempro 4.7 and 4.8 allow SQL injection. The parameter CampaignID in Campaign.Get is vulnerable...
CVE-2019-19740
Octeth Oempro 4.7 and 4.8 allow SQL injection. The parameter CampaignID in Campaign.Get is vulnerable...
Sql injection
Octeth Oempro 4.7 and 4.8 allow SQL injection. The parameter CampaignID in Campaign.Get is vulnerable...
CVE-2019-19740
Octeth Oempro 4.7–4.8 contains a SQL injection in the Campaign.Get endpoint via the CampaignID parameter. The issue allows an attacker to inject SQL, with exploitation demonstrated in public advisories and exploits showing authenticated access can trigger the vulnerability. Impact is described as...
CVE-2019-19740
Octeth Oempro 4.7 and 4.8 allow SQL injection. The parameter CampaignID in Campaign.Get is vulnerable...
PT-2019-15940 · Octeth · Octeth Oempro
Name of the Vulnerable Software and Affected Versions: Octeth Oempro versions 4.7 through 4.8 Description: The issue allows SQL injection. The parameter CampaignID in the Campaign.Get endpoint is vulnerable. Recommendations: For versions 4.7 and 4.8, avoid using the CampaignID parameter in the...
OemPro 3.6.4 - Multiple Vulnerabilities
No description provided by source. Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: [email protected] Path disclosure:...
Octeth Oempro 3.5.5 Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/32784/info Octeth Oempro is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
OemPro v3.6.4 Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: email protected Path...
OemPro 3.6.4 SQL Injection / Shell Upload
Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: [email protected] Path disclosure: http://localhost/clibounce.php FCKEditor 2.3.2...
Octeth Oempro 3.6.4 - SQL Injection Information Disclosure
Octeth Oempro 3.6.4 - SQL Injection Information Disclosure source: https://www.securityfocus.com/bid/46135/info Octeth Oempro is prone to multiple SQL-injection vulnerabilities and an information-disclosure vulnerability. Exploiting these issues could allow an attacker to obtain sensitive...
OemPro 3.6.4 - Multiple Vulnerabilities
OemPro 3.6.4 - Multiple Vulnerabilities Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: [email protected] Path disclosure:...
Octeth Oempro 3.6.4 - SQL Injection / Information Disclosure
source: https://www.securityfocus.com/bid/46135/info Octeth Oempro is prone to multiple SQL-injection vulnerabilities and an information-disclosure vulnerability. Exploiting these issues could allow an attacker to obtain sensitive information, compromise the application, access or modify data, or...