high7.5Public exploit code
CVE-2008-5978
Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary SQL commands via the Email parameter to…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ocean12 Mailing LisManager Gold 2.04 - 'Email' SQL Injection2008-11-29 · webapps · asp · Verified
- Ocean12 Mailing List Manager Gold - File Disclosure / SQL Injection / Cross-Site Scripting2008-12-02 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary SQL commands via the Email parameter to (1) default.asp and (2) s_edit.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ocean12 Technologies | Mailing List Manager | Version _nil_ |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/32929
- http://www.securityfocus.com/bid/32587
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47021
- https://www.exploit-db.com/exploits/7319
- http://secunia.com/advisories/32929
- http://www.securityfocus.com/bid/32587
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47021
- https://www.exploit-db.com/exploits/7319