Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Oi Subscribe
Filtered by product Email Marketing System
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-0919 1 Oi 1 Email Marketing System 2018-10-18 7.5 HIGH N/A
SQL injection vulnerability in index.php (aka the login page) in Oi! Email Marketing System 3.0 (aka Oi! 3) allows remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields.
CVE-2006-0920 1 Oi 1 Email Marketing System 2018-10-18 1.7 LOW N/A
Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext on a Configuration web page, which allows local users with superadministrator privileges, or attackers who have obtained access to the web page, to view the password.