70 matches found
Sql injection
Octeth Oempro 4.7 and 4.8 allow SQL injection. The parameter CampaignID in Campaign.Get is vulnerable...
CVE-2019-19740
Octeth Oempro 4.7 and 4.8 allow SQL injection. The parameter CampaignID in Campaign.Get is vulnerable...
CVE-2019-19740
Octeth Oempro 4.7–4.8 contains a SQL injection in the Campaign.Get endpoint via the CampaignID parameter. The issue allows an attacker to inject SQL, with exploitation demonstrated in public advisories and exploits showing authenticated access can trigger the vulnerability. Impact is described as...
CVE-2019-19740: Improper Neutralization of Special Elements used in an SQL Command
Octeth Oempro 4.7 and 4.8 allow SQL injection. The parameter CampaignID in Campaign.Get is vulnerable...
PT-2019-15940 · Octeth · Octeth Oempro
Name of the Vulnerable Software and Affected Versions: Octeth Oempro versions 4.7 through 4.8 Description: The issue allows SQL injection. The parameter CampaignID in the Campaign.Get endpoint is vulnerable. Recommendations: For versions 4.7 and 4.8, avoid using the CampaignID parameter in the...
Octeth Oempro 3.5.5 Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/32784/info Octeth Oempro is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
OemPro 3.6.4 - Multiple Vulnerabilities
No description provided by source. Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: [email protected] Path disclosure:...
OemPro v3.6.4 Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: email protected Path...
OemPro 3.6.4 SQL Injection / Shell Upload
Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: [email protected] Path disclosure: http://localhost/clibounce.php FCKEditor 2.3.2...
OemPro 3.6.4 - Multiple Vulnerabilities
OemPro 3.6.4 - Multiple Vulnerabilities Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: [email protected] Path disclosure:...
Octeth Oempro 3.6.4 - SQL Injection / Information Disclosure
source: https://www.securityfocus.com/bid/46135/info Octeth Oempro is prone to multiple SQL-injection vulnerabilities and an information-disclosure vulnerability. Exploiting these issues could allow an attacker to obtain sensitive information, compromise the application, access or modify data, or...
OemPro 3.6.4 - Multiple Vulnerabilities
Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: [email protected] Path disclosure: http://localhost/clibounce.php FCKEditor 2.3.2...
Octeth Oempro 3.6.4 - SQL Injection Information Disclosure
Octeth Oempro 3.6.4 - SQL Injection Information Disclosure source: https://www.securityfocus.com/bid/46135/info Octeth Oempro is prone to multiple SQL-injection vulnerabilities and an information-disclosure vulnerability. Exploiting these issues could allow an attacker to obtain sensitive...
Oempro index.php FormValue_Email Parameter SQL Injection Authentication Bypass
The remote host is running Oempro, a commercial list management and email marketing application written in PHP. The installed version of Oempro fails to sanitize user-supplied input to the 'FormValueEmail' parameter of the 'index.php' script before using it in a database query. An unauthenticated...
CVE-2008-3057
Octeth Oempro 3.5.5.1, and possibly other versions before 4, does not set the secure flag for the PHPSESSID cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
CVE-2008-3058
Multiple SQL injection vulnerabilities in Octeth Oempro 3.5.5.1, and possibly other versions before 4, allow remote attackers to execute arbitrary SQL commands via the FormValueEmail parameter aka Email field to index.php in 1 member/, 2 client/, or 3 admin/; or 4 the FormValueSearchKeywords...
CVE-2008-3059
member/settingsaccount.php in Octeth Oempro 3.5.5.1, and possibly other versions before 4, uses cleartext to transmit a password entered in the FormValuePassword field, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to the "Settings -...
Sql injection
Multiple SQL injection vulnerabilities in Octeth Oempro 3.5.5.1, and possibly other versions before 4, allow remote attackers to execute arbitrary SQL commands via the FormValueEmail parameter aka Email field to index.php in 1 member/, 2 client/, or 3 admin/; or 4 the FormValueSearchKeywords...
Design/Logic Flaw
Octeth Oempro 3.5.5.1, and possibly other versions before 4, does not set the secure flag for the PHPSESSID cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
CVE-2008-3058
Multiple SQL injection vulnerabilities in Octeth Oempro 3.5.5.1, and possibly other versions before 4, allow remote attackers to execute arbitrary SQL commands via the FormValueEmail parameter aka Email field to index.php in 1 member/, 2 client/, or 3 admin/; or 4 the FormValueSearchKeywords...