Ocean12tech

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Ocean12tech records in CISA KEV

No Ocean12tech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Contact Manager Pro 2 records LOW Faq Manager Pro 2 records LOW Membership Manager Pro 2 records LOW

Records

6 records

TI-2008-06063 CVE-2008-6371 · GHSA-7jm8-4m93-h4v6

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote…

LOW 37

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username (Username parameter).

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02005 Published 2009-03-02 No fix listed CWE-89

TI-2008-06082 CVE-2008-6390 · GHSA-hgf3-mwx8-rxh5

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote…

LOW 35

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0101 Published 2009-03-02 No fix listed CWE-89

TI-2008-06064 CVE-2008-6372 · GHSA-588w-9pf6-vpw5

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote…

LOW 35

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a Cat action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2009-03-02 No fix listed CWE-89

TI-2008-06061 CVE-2008-6369 · GHSA-m5vq-v528-6995

SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows…

LOW 35

SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbitrary SQL commands via the Sort parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01003 Published 2009-03-02 No fix listed CWE-89

TI-2008-06751 CVE-2008-7063 · GHSA-8r9v-cfhr-q3m2

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access…

LOW 27

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02229 Published 2009-08-25 No fix listed CWE-200

TI-2008-06062 CVE-2008-6370 · GHSA-43f3-c74j-pqxh

Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro…

LOW 23

Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to inject arbitrary web script or HTML via the DisplayFormat parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01499 Published 2009-03-02 No fix listed CWE-79

Open these records in search →

Critical	0
High	4
Medium	2
Low	0
No CVSS	0