EUVD-2002-1482

Malware in sbrugna...

FactoSystem Weblog 0.9/1.0/1.1 - Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/5600/info FactoSystem Weblog is a freely available, open source software package for weblogging and managing content. It is available for Microsoft Windows operating systems. FactoSystem does not adequately filter special...

CVE-2002-1499

Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via 1 the authornumber parameter in author.asp, 2 the discussblurbid parameter in discuss.asp, 3 the name parameter in holdcomment.asp, and 4 the email parameter in...

CVE-2002-1499

Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via 1 the authornumber parameter in author.asp, 2 the discussblurbid parameter in discuss.asp, 3 the name parameter in holdcomment.asp, and 4 the email parameter in...

CVE-2002-1499

CVE-2002-1499 affects FactoSystem CMS. The vulnerability involves multiple SQL injections in web-facing scripts, allowing remote attackers to perform unauthorized database actions via (1) author.asp (authornumber), (2) discuss.asp (discussblurbid), (3) holdcomment.asp (name), and (4) holdcomment....

FactoSystem CMS Contains Multiple Vulnerabilities

FactoSystem CMS Contains Multiple Vulnerabilities Impact: Multiple vulnerabilities -- all allowing manipulation of the backend database Risk: High Class: Input Validation Error Affected System: IIS 4.0 or later with ASP enabled and FactoSystem CMS installed Description Multiple SQL injection...

FactoSystem Weblog 0.91.01.1 - Multiple SQL Injections

FactoSystem Weblog 0.91.01.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/5600/info FactoSystem Weblog is a freely available, open source software package for weblogging and managing content. It is available for Microsoft Windows operating systems. FactoSystem does not...

FactoSystem Weblog 0.9/1.0/1.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/5600/info FactoSystem Weblog is a freely available, open source software package for weblogging and managing content. It is available for Microsoft Windows operating systems. FactoSystem does not adequately filter special characters from requests. Because...