CVE-2008-3417

SQL injection vulnerability in fipsCMS light 2.1 and earlier affects home/index.asp by crafting the r parameter, allowing remote attackers to execute arbitrary SQL commands. Root cause is improper handling of user input in the index page. Impact is partial confidentiality, integrity, and availabi...