← Database

CVE-2008-6371

HIGH CVSS: 7.5 Published: 2009-03-02 Modified: 2026-06-16

Description

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username (Username parameter).

Affected Platforms

Ocean12Tech Membership Manager Pro

Weakness Type

CWE-89

References