Ocean12 Technologies Calendar Manager Pro vulnerabilities

CVE-2005-1223 [HIGH] CVE-2005-1223: Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to ex Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Admin_id field.

CVE-2005-4657 [HIGH] CVE-2005-4657: Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensit Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVE-2006-2264 [MEDIUM] CVE-2006-2264: Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers t Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary SQL commands via the (1) date parameter to admin/main.asp, (2) SearchFor parameter to admin/view.asp, or (3) ID parameter to admin/edit.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third part

CVE-2006-2265 [LOW] CVE-2006-2265: Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows rem Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.