medium6.5Public exploit code
CVE-2006-2264
Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary SQL commands via the (1) date parameter…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ocean12 Technologies Calendar Manager Pro 1.0 1 - '/admin/edit.asp?ID' SQL Injection2006-05-08 · webapps · asp · Verified
- Ocean12 Technologies Calendar Manager Pro 1.0 1 - '/admin/view.asp?searchFor' SQL Injection2006-05-08 · webapps · asp · Verified
- Ocean12 Technologies Calendar Manager Pro 1.0 1 - '/admin/main.asp?date' SQL Injection2006-05-08 · webapps · asp · Verified
Impact
Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary SQL commands via the (1) date parameter to admin/main.asp, (2) SearchFor parameter to admin/view.asp, or (3) ID parameter to admin/edit.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ocean12 Technologies | Calendar Manager Pro | Version 1.00 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/20036
- http://www.osvdb.org/25344
- http://www.osvdb.org/25345
- http://www.osvdb.org/25346
- http://www.securityfocus.com/bid/17877
- http://www.vupen.com/english/advisories/2006/1705
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26334
- http://secunia.com/advisories/20036
- http://www.osvdb.org/25344
- http://www.osvdb.org/25345
- http://www.osvdb.org/25346
- http://www.securityfocus.com/bid/17877
- http://www.vupen.com/english/advisories/2006/1705
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26334