6.5
CVSSv2

CVE-2006-2264

Published: 09/05/2006 Updated: 20/07/2017
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
VMScore: 665
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote malicious users to execute arbitrary SQL commands via the (1) date parameter to admin/main.asp, (2) SearchFor parameter to admin/view.asp, or (3) ID parameter to admin/edit.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerable Product Search on Vulmon Subscribe to Product

ocean12 technologies calendar manager pro 1.00

Exploits

source: wwwsecurityfocuscom/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities The issues include cross-site scripting and SQL-injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input A successful exploit of these vulnerabilities ...
source: wwwsecurityfocuscom/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities The issues include cross-site scripting and SQL-injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input A successful exploit of these vulnerabilities cou ...
source: wwwsecurityfocuscom/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities The issues include cross-site scripting and SQL-injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input A successful exploit of these vulnerabilities c ...