Ocean12tech

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Ocean12tech records in CISA KEV

No Ocean12tech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Contact Manager Pro 2 records LOW Faq Manager Pro 2 records LOW Membership Manager Pro 2 records LOW

Records

2 records in Faq Manager Pro · all components

TI-2008-06064 CVE-2008-6372 · GHSA-588w-9pf6-vpw5

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote…

LOW 35

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a Cat action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2009-03-02 No fix listed CWE-89

TI-2008-06751 CVE-2008-7063 · GHSA-8r9v-cfhr-q3m2

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access…

LOW 27

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02229 Published 2009-08-25 No fix listed CWE-200

Open these records in search →

Critical	0
High	4
Medium	2
Low	0
No CVSS	0