Vendorsocean12 Technologiescalendar_manager_proall versions
Vulnerabilities

ocean12 Technologies Calendar Manager Pro

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2005-4657
Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published 2006-01-16 · Modified
7.51 PoCEPSS 0.030
CVE-2005-1223
Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Admin_id field.
Published 2005-04-22 · Modified
7.51 PoCEPSS 0.012
CVE-2006-2264
Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary SQL commands via the (1) date parameter to admin/main.asp, (2) SearchFor parameter to admin/view.asp, or (3) ID parameter to admin/edit.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published 2006-05-09 · Modified
6.53 PoCEPSS 0.011
CVE-2006-2265
Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published 2006-05-09 · Modified
2.61 PoCEPSS 0.020