CVE-2008-5978
Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote...
Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary SQL commands via the Email parameter to (1) default.asp and (2) s_edit.asp.
Exploit likelihood
What each source reports
NVD Score used
Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary SQL commands via the Email parameter to (1) default.asp and (2) s_edit.asp.
- Record
CVE-2008-5978- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary SQL commands via the Email parameter to (1) default.asp and (2) s_edit.asp.
- Record
CVE-2008-5978- Updated
- 2026-11-02
EUVDEUVD-2008-5948 No score
Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary SQL commands via the Email parameter to (1) default.asp and (2) s_edit.asp.
- Record
EUVD-2008-5948- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cxwx-7qgh-427w No score
Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote...
Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary SQL commands via the Email parameter to (1) default.asp and (2) s_edit.asp.
- Record
GHSA-cxwx-7qgh-427w- Weakness
- CWE-89
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10738-1 No score
eog-40.3-1.2 on GA media
These are all security issues fixed in the eog-40.3-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10738-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
eogopenSUSE:Tumbleweed |
before 40.3-1.2 | 40.3-1.2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Ocean12 Mailing LisManager Gold 2.04 - 'Email' SQL Injection | 2008-11-29 |
| Exploit-DB | Ocean12 Mailing List Manager Gold - File Disclosure / SQL Injection / Cross-Site Scripting | 2008-12-02 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-5978 is a high vulnerability (CVSS 7.5) in Ocean12 Technologies Mailing List Manager, published January 27, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.14%, the 66th percentile. Fixed in eog 40.3-1.2.