Vulnerabilities

TI-2005-04394 CVE-2005-4664 · GHSA-vxhm-ccj3-8p4x

SQL injection vulnerability in OcoMon 1.21, and possibly other versions, when…

LOW 25

SQL injection vulnerability in OcoMon 1.21, and possibly other versions, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the logon page, a different vulnerability than CVE…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01096 Published 2006-01-16 No fix listed

TI-2005-04393 CVE-2005-4663 · GHSA-3qwx-85qr-mvqm

Cross-site scripting (XSS) vulnerability in OcoMon 1.20, and possibly earlier versions…

LOW 22

Cross-site scripting (XSS) vulnerability in OcoMon 1.20, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01188 Published 2006-01-16 No fix listed

TI-2005-04392 CVE-2005-4662 · GHSA-8c3h-ggpx-cvjg

Multiple SQL injection vulnerabilities in OcoMon 1.20, and possibly earlier versions…

LOW 25

Multiple SQL injection vulnerabilities in OcoMon 1.20, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via unknown attack vectors in an unspecified input form, a different vulnerab…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0127 Published 2006-01-16 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in OcoMon 1.21, and possibly other versions, when…

Cross-site scripting (XSS) vulnerability in OcoMon 1.20, and possibly earlier versions…

Multiple SQL injection vulnerabilities in OcoMon 1.20, and possibly earlier versions…