Oi

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Oi records in CISA KEV

No Oi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Email Marketing System 2 records LOW Minha Oi 1 record LOW

Records

3 records

TI-2006-00894 CVE-2006-0919 · GHSA-2h7x-5525-cw8v

SQL injection vulnerability in index.php (aka the login page) in Oi! Email Marketing…

LOW 36

SQL injection vulnerability in index.php (aka the login page) in Oi! Email Marketing System 3.0 (aka Oi! 3) allows remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0133 Published 2006-02-28 No fix listed

TI-2014-04866 CVE-2014-5916 · GHSA-4mqc-8rpf-fw73

The Minha Oi (aka br.com.mobicare.minhaoi) application 1.15.0 for Android does not verify…

LOW 24

The Minha Oi (aka br.com.mobicare.minhaoi) application 1.15.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information vi…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-17 No fix listed CWE-310

TI-2006-00895 CVE-2006-0920 · GHSA-gxgv-5xp3-m6cr

Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext…

LOW 11

Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext on a Configuration web page, which allows local users with superadministrator privileges, or attackers who have obtained access to…

CVSS 2.0LOW 1.7 Local Low privileges Interaction — EPSS 0.00787 Published 2006-02-28 No fix listed

Open these records in search →

Critical	0
High	1
Medium	1
Low	1
No CVSS	0