EUVD-2002-1482

Malware in sbrugna...

CVE-2002-1499

Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via 1 the authornumber parameter in author.asp, 2 the discussblurbid parameter in discuss.asp, 3 the name parameter in holdcomment.asp, and 4 the email parameter in...

CVE-2002-1499

Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via 1 the authornumber parameter in author.asp, 2 the discussblurbid parameter in discuss.asp, 3 the name parameter in holdcomment.asp, and 4 the email parameter in...

CVE-2002-1499: Undefined Security Weakness

Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via 1 the authornumber parameter in author.asp, 2 the discussblurbid parameter in discuss.asp, 3 the name parameter in holdcomment.asp, and 4 the email parameter in...

FactoSystem CMS Contains Multiple Vulnerabilities

FactoSystem CMS Contains Multiple Vulnerabilities Impact: Multiple vulnerabilities -- all allowing manipulation of the backend database Risk: High Class: Input Validation Error Affected System: IIS 4.0 or later with ASP enabled and FactoSystem CMS installed Description Multiple SQL injection...