Vulnerabilities (CVE)

Filtered by vendor Ocomon Subscribe
Filtered by product Ocomon
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-4662 1 Ocomon 1 Ocomon 2024-02-04 5.0 MEDIUM N/A
Multiple SQL injection vulnerabilities in OcoMon 1.20, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via unknown attack vectors in an unspecified input form, a different vulnerability than CVE-2005-4664.
CVE-2005-4664 1 Ocomon 1 Ocomon 2024-02-04 5.0 MEDIUM N/A
SQL injection vulnerability in OcoMon 1.21, and possibly other versions, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the logon page, a different vulnerability than CVE-2005-4662.
CVE-2005-4663 1 Ocomon 1 Ocomon 2024-02-04 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in OcoMon 1.20, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.