CVE-2005-1096

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to execute arbitrary SQL commands via the UserID parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/14864Vendor Advisory
http://securitytracker.com/id?1013667Vendor Advisory
http://www.hackerscenter.com/archive/view.asp?id=1865Vendor Advisory
http://www.osvdb.org/15307Vendor Advisory
http://www.securityfocus.com/bid/13049Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/20015
http://secunia.com/advisories/14864Vendor Advisory
http://securitytracker.com/id?1013667Vendor Advisory
http://www.hackerscenter.com/archive/view.asp?id=1865Vendor Advisory
http://www.osvdb.org/15307Vendor Advisory
http://www.securityfocus.com/bid/13049Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/20015

Timeline

Published: Apr 6, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-10974.6Rebrand P2P Share Spy 2.2 stores the user password in plaintext in the txtPassword value in the registry, which allows local users to gain p CVE-2005-10982.1GetDataBack for NTFS 2.31 stores the username and license key in plaintext in the Name value in the License registry key, which may allow lo CVE-2005-109910.0Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is listening on a networ CVE-2005-11007.5Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote attackers to execute arb CVE-2005-11017.5Multiple buffer overflows in Lotus Domino Server 6.0.5 and 6.5.4 allow remote attackers to cause a denial of service (application crash) and CVE-2005-11026.8Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to ex CVE-2005-11034.6Sygate Security Agent (SSA) in Sygate Secure Enterprise 3.5 through 4.1 does not prevent the security policy from being updated by unprivile CVE-2005-11044.3Multiple cross-site scripting (XSS) vulnerabilities in Centra 7 allow remote attackers to inject arbitrary web script or HTML via the (1) us CVE-2005-11055.0Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows remote attackers to write arbitrary files CVE-2005-11065.0PictureViewer in QuickTime for Windows 6.5.2 allows remote attackers to cause a denial of service (application crash) via a GIF image with t CVE-2005-11077.2McAfee Internet Security Suite 2005 uses insecure default ACLs for installed files, which allows local users to gain privileges or disable p CVE-2005-11085.0The ij_untrusted_url function in JunkBuster 2.0.2-r2, with single-threaded mode enabled, allows remote attackers to overwrite the referrer f