https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-6390.htmlhttps://patchthecve.com/cve/CVE-2008-6390.htmlTue, 16 Jun 2026 23:02:08 +0000HIGH 7.5: SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.https://patchthecve.com/cve/CVE-2008-6371.htmlhttps://patchthecve.com/cve/CVE-2008-6371.htmlTue, 16 Jun 2026 23:02:06 +0000HIGH 7.5: SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username (Username parameter).https://patchthecve.com/cve/CVE-2008-5128.htmlhttps://patchthecve.com/cve/CVE-2008-5128.htmlTue, 16 Jun 2026 22:59:18 +0000MEDIUM 5.0: Ocean12 Membership Manager Pro stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to o12member.mdb.