Ocean12tech Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/ocean12tech/ Sun, 26 Feb 2023 09:11:50 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Ocean12tech Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/ocean12tech/ 32 32 CVE-2008-7063 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7063/ Sun, 26 Feb 2023 09:11:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7063/ Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb.

The post CVE-2008-7063 appeared first on CVE Vulnerability.

]]> Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb.

The post CVE-2008-7063 appeared first on CVE Vulnerability.

]]> CVE-2008-6369 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6369/ Sun, 26 Feb 2023 09:11:29 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6369/ SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbitrary SQL commands via the Sort parameter.

The post CVE-2008-6369 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbitrary SQL commands via the Sort parameter.

The post CVE-2008-6369 appeared first on CVE Vulnerability.

]]> CVE-2008-6370 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6370/ Sun, 26 Feb 2023 09:11:29 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6370/ Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to inject arbitrary web script or HTML via the DisplayFormat parameter.

The post CVE-2008-6370 appeared first on CVE Vulnerability.

]]> Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to inject arbitrary web script or HTML via the DisplayFormat parameter.

The post CVE-2008-6370 appeared first on CVE Vulnerability.

]]> CVE-2008-6371 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6371/ Sun, 26 Feb 2023 09:11:29 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6371/ SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username (Username parameter).

The post CVE-2008-6371 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username (Username parameter).

The post CVE-2008-6371 appeared first on CVE Vulnerability.

]]> CVE-2008-6372 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6372/ Sun, 26 Feb 2023 09:11:29 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6372/ SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a Cat action. NOTE: some of these details are obtained from third party information.

The post CVE-2008-6372 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a Cat action. NOTE: some of these details are obtained from third party information.

The post CVE-2008-6372 appeared first on CVE Vulnerability.

]]> CVE-2008-6390 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6390/ Sun, 26 Feb 2023 09:11:29 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6390/ SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

The post CVE-2008-6390 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

The post CVE-2008-6390 appeared first on CVE Vulnerability.

]]>