PT-2005-5322 · Ocean12 · Ocean12 Calendar Manager Pro

Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-4657

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ocean12 Calendar Manager Pro version 1.01

Description The issue allows remote attackers to bypass authentication and obtain sensitive information. This can be achieved via a direct request to the "/admin/view.asp" API endpoint.

Recommendations For Ocean12 Calendar Manager Pro version 1.01, as a temporary workaround, consider restricting access to the "/admin/view.asp" API endpoint until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2005-4657

Affected Products

Ocean12 Calendar Manager Pro

References · 3

• 🔥 https://exploit-db.com/exploits/26473 · Exploit
• 🔥 http://securityfocus.com/bid/15329 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4657 · Security Note