PatchTheCVEocean12tech vulnerabilities
Recent CVEs affecting ocean12tech products. 6 tracked.
ocean12tech has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-08-25. Highest priority: CVE-2008-6371 (score 51/100).
- CVE-2008-7063 MEDIUM 5.0 MITIGATE Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allow
- CVE-2008-6390 HIGH 7.5 MITIGATE SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute
- CVE-2008-6372 HIGH 7.5 DOWNGRADE SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute a
- CVE-2008-6371 HIGH 7.5 MITIGATE SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute
- CVE-2008-6370 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote atta
- CVE-2008-6369 HIGH 7.5 DOWNGRADE SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to exec
FAQ
How do I fix ocean12tech vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ocean12tech being exploited right now?
None of the tracked ocean12tech CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ocean12tech CVE should I patch first?
CVE-2008-6371 currently ranks highest (51/100): SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute .