4 results (0.001 seconds)

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 4

09 May 2006 — Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary SQL commands via the (1) date parameter to admin/main.asp, (2) SearchFor parameter to admin/view.asp, or (3) ID parameter to admin/edit.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. • https://www.exploit-db.com/exploits/27827 •

CVSS: 6.1EPSS: 3%CPEs: 1EXPL: 2

09 May 2006 — Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. • https://www.exploit-db.com/exploits/27828 •

CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 2

31 Dec 2005 — Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. • https://www.exploit-db.com/exploits/26473 •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 2

22 Apr 2005 — Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Admin_id field. • https://www.exploit-db.com/exploits/25469 •