CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 1CVE-2008-5128
https://notcve.org/view.php?id=CVE-2008-5128
Ocean12 Membership Manager Pro stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12member.mdb. Ocean12 Membership Manager Pro graba información sensible bajo la raíz web con control de acceso insuficiente, el cual permite a los atacantes remotos obtener información sensible a través de una petición directa a fichero o12member.mdb. • http://packetstorm.linuxsecurity.com/0810-exploits/ocean12-database.txt http://secunia.com/advisories/32409 https://exchange.xforce.ibmcloud.com/vulnerabilities/46133 https://exchange.xforce.ibmcloud.com/vulnerabilities/46693 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 1CVE-2008-5130
https://notcve.org/view.php?id=CVE-2008-5130
Ocean12 Calendar Manager Gold 2.04 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12cal.mdb. Ocean12 Calendar Manager Gold v2.04 almacena información sensible bajo la web raíz con control de acceso insuficiente, lo cual permite a atacantes remotos obtener información sensible a través de una petición directa a o12cal.mdb. • http://packetstorm.linuxsecurity.com/0810-exploits/ocean12-database.txt http://secunia.com/advisories/32409 https://exchange.xforce.ibmcloud.com/vulnerabilities/46133 https://exchange.xforce.ibmcloud.com/vulnerabilities/46694 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 2.6EPSS: 1%CPEs: 1EXPL: 2CVE-2006-2265 – Ocean12 Technologies Calendar Manager Pro 1.0 1 - '/admin/main.asp?date' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2006-2265
Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. • https://www.exploit-db.com/exploits/27828 http://secunia.com/advisories/20036 http://www.osvdb.org/25347 http://www.securityfocus.com/bid/17877 http://www.vupen.com/english/advisories/2006/1705 https://exchange.xforce.ibmcloud.com/vulnerabilities/26335 •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 4CVE-2006-2264 – Ocean12 Technologies Calendar Manager Pro 1.0 1 - '/admin/edit.asp?ID' SQL Injection
https://notcve.org/view.php?id=CVE-2006-2264
Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary SQL commands via the (1) date parameter to admin/main.asp, (2) SearchFor parameter to admin/view.asp, or (3) ID parameter to admin/edit.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. • https://www.exploit-db.com/exploits/27827 https://www.exploit-db.com/exploits/27826 https://www.exploit-db.com/exploits/27825 http://secunia.com/advisories/20036 http://www.osvdb.org/25344 http://www.osvdb.org/25345 http://www.osvdb.org/25346 http://www.securityfocus.com/bid/17877 http://www.vupen.com/english/advisories/2006/1705 https://exchange.xforce.ibmcloud.com/vulnerabilities/26334 •
CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 2CVE-2005-4657 – Ocean12 ASP Calendar Manager 1.0 - Authentication Bypass
https://notcve.org/view.php?id=CVE-2005-4657
Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. • https://www.exploit-db.com/exploits/26473 http://www.securityfocus.com/bid/15329 •