Vulnerabilities

TI-2008-06751 CVE-2008-7063 · GHSA-8r9v-cfhr-q3m2

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access…

LOW 27

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02229 Published 2009-08-25 No fix listed CWE-200

TI-2008-06082 CVE-2008-6390 · GHSA-hgf3-mwx8-rxh5

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote…

LOW 35

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0101 Published 2009-03-02 No fix listed CWE-89

TI-2008-06064 CVE-2008-6372 · GHSA-588w-9pf6-vpw5

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote…

LOW 35

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a Cat action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2009-03-02 No fix listed CWE-89

TI-2008-06063 CVE-2008-6371 · GHSA-7jm8-4m93-h4v6

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote…

LOW 37

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username (Username parameter).

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02005 Published 2009-03-02 No fix listed CWE-89

TI-2008-06062 CVE-2008-6370 · GHSA-43f3-c74j-pqxh

Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro…

LOW 23

Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to inject arbitrary web script or HTML via the DisplayFormat parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01499 Published 2009-03-02 No fix listed CWE-79

TI-2008-06061 CVE-2008-6369 · GHSA-m5vq-v528-6995

SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows…

LOW 35

SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbitrary SQL commands via the Sort parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01003 Published 2009-03-02 No fix listed CWE-89

Vulnerabilities

Filters

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access…

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote…

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote…

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote…

Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro…

SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows…