Vulnerabilities

TI-2008-06751 CVE-2008-7063 · GHSA-8r9v-cfhr-q3m2

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access…

LOW 27

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02229 Published 2009-08-25 No fix listed CWE-200

TI-2008-06064 CVE-2008-6372 · GHSA-588w-9pf6-vpw5

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote…

LOW 35

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a Cat action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2009-03-02 No fix listed CWE-89

Vulnerabilities

Filters

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access…

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote…