Vulnerabilities

TI-2008-05676 CVE-2008-5980 · GHSA-vhxg-vhfv-5p36

Ocean12 Mailing List Manager Gold stores sensitive data under the web root with…

LOW 28

Ocean12 Mailing List Manager Gold stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for o12mail.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02839 Published 2009-01-27 No fix listed CWE-264

TI-2008-05675 CVE-2008-5979 · GHSA-5hgp-92c3-m5fg

Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Mailing List Manager…

LOW 23

Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Mailing List Manager Gold allows remote attackers to inject arbitrary web script or HTML via the Email parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01684 Published 2009-01-27 No fix listed CWE-79

TI-2008-05674 CVE-2008-5978 · GHSA-cxwx-7qgh-427w

Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote…

LOW 35

Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary SQL commands via the Email parameter to (1) default.asp and (2) s_edit.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01142 Published 2009-01-27 No fix listed CWE-89

TI-2008-04881 CVE-2008-5130 · GHSA-qcx8-rm35-25g5

Ocean12 Calendar Manager Gold 2.04 stores sensitive information under the web root with…

LOW 26

Ocean12 Calendar Manager Gold 2.04 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12cal.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01324 Published 2008-11-18 No fix listed CWE-264

TI-2008-04880 CVE-2008-5129 · GHSA-cfmr-phm5-rgw8

Ocean12 Poll Manager Pro 1.00 stores sensitive information under the web root with…

LOW 26

Ocean12 Poll Manager Pro 1.00 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12poll.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01325 Published 2008-11-18 No fix listed CWE-264

TI-2008-04879 CVE-2008-5128 · GHSA-v6cc-28f6-mj2q

Ocean12 Membership Manager Pro stores sensitive information under the web root with…

LOW 26

Ocean12 Membership Manager Pro stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12member.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01324 Published 2008-11-18 No fix listed CWE-264

TI-2008-04878 CVE-2008-5127 · GHSA-jq88-hh5r-6g8p

Ocean12 Contact Manager Pro 1.02 stores sensitive information under the web root with…

LOW 26

Ocean12 Contact Manager Pro 1.02 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12con.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01378 Published 2008-11-18 No fix listed CWE-264

TI-2006-02206 CVE-2006-2265 · GHSA-fr8j-5vr2-gcm9

Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00…

LOW 17

Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to inject arbitrary web script or HTML via the date parameter.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02056 Published 2006-05-09 No fix listed

TI-2006-02205 CVE-2006-2264 · GHSA-qjx3-mhpq-j6q3

Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote…

LOW 31

Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary SQL commands via the (1) date parameter to admin/main.asp, (2) SearchFor parameter to admin/view.asp…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0117 Published 2006-05-09 No fix listed

TI-2005-04387 CVE-2005-4657 · GHSA-v6xv-gxfj-pv5f

Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and…

LOW 38

Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02969 Published 2006-01-16 No fix listed

TI-2005-01342 CVE-2005-1419 · GHSA-96c6-p7fm-48ww

SQL injection vulnerability in the admin login panel for Ocean12 Mailing List Manager…

LOW 36

SQL injection vulnerability in the admin login panel for Ocean12 Mailing List Manager 1.06 allows remote attackers to execute arbitrary SQL commands via the Admin_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0133 Published 2005-05-03 No fix listed

TI-2005-01158 CVE-2005-1223 · GHSA-hj63-xjxh-c63g

Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote…

LOW 35

Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Admin_id field.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01157 Published 2005-04-22 No fix listed

TI-2005-01034 CVE-2005-1096 · GHSA-f7c2-hxmf-qfwm

SQL injection vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows…

LOW 36

SQL injection vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to execute arbitrary SQL commands via the UserID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01333 Published 2005-04-13 No fix listed

TI-2005-01033 CVE-2005-1095 · GHSA-qvxm-f262-69gh

Cross-site scripting (XSS) vulnerability in main.asp for Ocean12 Membership Manager Pro…

LOW 24

Cross-site scripting (XSS) vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to inject arbitrary web script or HTML via the page parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01911 Published 2005-04-13 No fix listed

Vulnerabilities

Filters