ocean12tech kayıtları
ocean12tech üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2008-6371Kavram kanıtı | SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via theocean12tech · membership manager pro · CWE-89 | Yüksek7,5 | — | %2,0 | 2 Mar 2009 |
30İzleyin | CVE-2008-6390Kavram kanıtı | SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via theocean12tech · membership manager pro · CWE-89 | Yüksek7,5 | — | %1,0 | 2 Mar 2009 |
30İzleyin | CVE-2008-6369Kavram kanıtı | SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbitrary SQL commands viaocean12tech · contact manager pro · CWE-89 | Yüksek7,5 | — | %1,0 | 2 Mar 2009 |
30İzleyin | CVE-2008-6372Kavram kanıtı | SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the ocean12tech · faq manager pro · CWE-89 | Yüksek7,5 | — | %1,0 | 2 Mar 2009 |
21İzleyin | CVE-2008-7063Kavram kanıtı | Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to downloadocean12tech · faq manager pro · CWE-200 | Orta5,0 | — | %2,2 | 25 Ağu 2009 |
17İzleyin | CVE-2008-6370Kavram kanıtı | Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to inject arbitrary web ocean12tech · contact manager pro · CWE-79 | Orta4,3 | — | %1,5 | 2 Mar 2009 |
- CVE-2008-637131İzleyin
SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the
YüksekCVSS 7,5Kavram kanıtıEPSS %2ocean12tech · membership manager pro2 Mar 2009
- CVE-2008-639030İzleyin
SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the
YüksekCVSS 7,5Kavram kanıtıEPSS %1ocean12tech · membership manager pro2 Mar 2009
- CVE-2008-636930İzleyin
SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbitrary SQL commands via
YüksekCVSS 7,5Kavram kanıtıEPSS %1ocean12tech · contact manager pro2 Mar 2009
- CVE-2008-637230İzleyin
SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the
YüksekCVSS 7,5Kavram kanıtıEPSS %1ocean12tech · faq manager pro2 Mar 2009
- CVE-2008-706321İzleyin
Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download
OrtaCVSS 5,0Kavram kanıtıEPSS %2ocean12tech · faq manager pro25 Ağu 2009
- CVE-2008-637017İzleyin
Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to inject arbitrary web
OrtaCVSS 4,3Kavram kanıtıEPSS %1ocean12tech · contact manager pro2 Mar 2009