CVE-2008-6371

Ocean12 Membership Manager Pro is affected by an SQL injection in login.asp triggered by the Username parameter. The vulnerability arises from insufficient sanitization of user-supplied data, enabling remote attackers to craft input that causes arbitrary SQL execution. This aligns with multiple r...

CVE-2008-6390

CVE-2008-6390 describes an SQL injection vulnerability in login.asp of Ocean12 Membership Manager Pro. The vulnerability allows remote attackers to execute arbitrary SQL commands via the Password parameter. The primary source notes that the provenance of the information is from third‑party data. ...