CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 4CVE-2006-2264 – Ocean12 Technologies Calendar Manager Pro 1.0 1 - '/admin/edit.asp?ID' SQL Injection
https://notcve.org/view.php?id=CVE-2006-2264
Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary SQL commands via the (1) date parameter to admin/main.asp, (2) SearchFor parameter to admin/view.asp, or (3) ID parameter to admin/edit.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. • https://www.exploit-db.com/exploits/27827 https://www.exploit-db.com/exploits/27826 https://www.exploit-db.com/exploits/27825 http://secunia.com/advisories/20036 http://www.osvdb.org/25344 http://www.osvdb.org/25345 http://www.osvdb.org/25346 http://www.securityfocus.com/bid/17877 http://www.vupen.com/english/advisories/2006/1705 https://exchange.xforce.ibmcloud.com/vulnerabilities/26334 •
CVSS: 2.6EPSS: 1%CPEs: 1EXPL: 2CVE-2006-2265 – Ocean12 Technologies Calendar Manager Pro 1.0 1 - '/admin/main.asp?date' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2006-2265
Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. • https://www.exploit-db.com/exploits/27828 http://secunia.com/advisories/20036 http://www.osvdb.org/25347 http://www.securityfocus.com/bid/17877 http://www.vupen.com/english/advisories/2006/1705 https://exchange.xforce.ibmcloud.com/vulnerabilities/26335 •