CVE-2006-2264 - CVE House
Back to Database
Status published Medium CVE-2006-2264

Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00...

Vulnerability Description

Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary SQL commands via the (1) date parameter to admin/main.asp, (2) SearchFor parameter to admin/view.asp, or (3) ID parameter to admin/edit.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-2264

Credits & Attribution

No credits recorded in the NVD database.

References

More from ocean12 technologies

View All →
CVE-2008-5980
Ocean12 Mailing List Manager Gold stores sensitive data under the...
Medium 5
CVE-2008-5979
Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Mailing List...
Medium 4.3
CVE-2008-5978
Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold...
High 7.5
CVE-2008-5130
Ocean12 Calendar Manager Gold 2.04 stores sensitive information under the...
Medium 5
CVE-2008-5129
Ocean12 Poll Manager Pro 1.00 stores sensitive information under the...
Medium 5

Affected Vendor

ocean12 technologies

View all reports →

Affected Software

calendar manager pro
Vulnerable Versions:
1.00

Timeline

Official Publish: May 9th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.