CVE-2008-6369

The CVE-2008-6369 entry concerns a SQL injection in Ocean12 Contact Manager Pro 1.02. The affected component is default.asp, where the Sort parameter enables remote attackers to execute arbitrary SQL commands. The language in the connected records confirms the vulnerability class and affected pro...

CVE-2008-6370

CVE-2008-6370 : XSS in Ocean12 Contact Manager Pro 1.02 (default.asp) via the DisplayFormat parameter. Remote attackers can inject arbitrary script/HTML. No exploitation details or patch information are provided in the supplied documents.