EUVD-2002-1482

Malware in sbrugna...

FactoSystem Weblog 0.9/1.0/1.1 - Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/5600/info FactoSystem Weblog is a freely available, open source software package for weblogging and managing content. It is available for Microsoft Windows operating systems. FactoSystem does not adequately filter special...

CVE-2002-1499

Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via 1 the authornumber parameter in author.asp, 2 the discussblurbid parameter in discuss.asp, 3 the name parameter in holdcomment.asp, and 4 the email parameter in...

CVE-2002-1499

CVE-2002-1499 affects FactoSystem CMS. The vulnerability involves multiple SQL injections in web-facing scripts, allowing remote attackers to perform unauthorized database actions via (1) author.asp (authornumber), (2) discuss.asp (discussblurbid), (3) holdcomment.asp (name), and (4) holdcomment....

CVE-2002-1499

Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via 1 the authornumber parameter in author.asp, 2 the discussblurbid parameter in discuss.asp, 3 the name parameter in holdcomment.asp, and 4 the email parameter in...

FactoSystem CMS Contains Multiple Vulnerabilities

FactoSystem CMS Contains Multiple Vulnerabilities Impact: Multiple vulnerabilities -- all allowing manipulation of the backend database Risk: High Class: Input Validation Error Affected System: IIS 4.0 or later with ASP enabled and FactoSystem CMS installed Description Multiple SQL injection...

FactoSystem Weblog 0.91.01.1 - Multiple SQL Injections

FactoSystem Weblog 0.91.01.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/5600/info FactoSystem Weblog is a freely available, open source software package for weblogging and managing content. It is available for Microsoft Windows operating systems. FactoSystem does not...

FactoSystem Weblog 0.9/1.0/1.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/5600/info FactoSystem Weblog is a freely available, open source software package for weblogging and managing content. It is available for Microsoft Windows operating systems. FactoSystem does not adequately filter special characters from requests. Because...