Vulnerabilities

TI-2008-06062 CVE-2008-6370 · GHSA-43f3-c74j-pqxh

Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro…

LOW 23

Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to inject arbitrary web script or HTML via the DisplayFormat parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01499 Published 2009-03-02 No fix listed CWE-79

TI-2008-06061 CVE-2008-6369 · GHSA-m5vq-v528-6995

SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows…

LOW 35

SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbitrary SQL commands via the Sort parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01003 Published 2009-03-02 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro…

SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows…