Vendorsocean12techcontact_manager_pro1.02
Vulnerabilities

ocean12tech Contact Manager Pro 1.02

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2008-6369
SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbitrary SQL commands via the Sort parameter.
Published 2009-03-02 · Modified
7.51 PoCEPSS 0.010
CVE-2008-6370
Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to inject arbitrary web script or HTML via the DisplayFormat parameter.
Published 2009-03-02 · Modified
4.31 PoCEPSS 0.015