CVE-2006-6115

CVE-2006-6115 describes a SQL injection vulnerability in index.asp of fipsCMS 4.5 and earlier via the fid parameter. Remote attackers could potentially execute arbitrary SQL commands through this input. The description does not specify affected versions beyond “4.5 and earlier” nor provide remedi...

CVE-2006-6115: Undefined Security Weakness

SQL injection vulnerability in index.asp in fipsCMS 4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the fid parameter...

FipsCMS Index.ASP SQL Injection Vulnerability

fipsCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

fipsCMS <= 4.5 (index.asp) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: fipsCMS = v4.5 index.asp Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : use IO::Socket; if@ARGV 3 print " ======================================================================== // fipsCMS = v4.5 index.asp...

FipsCMS 4.5 - 'index.asp' SQL Injection

!/usr/bin/perl Script Name: fipsCMS newProto = "tcp", PeerAddr = "$server", PeerPort = "$port" || die "\n+ Connection failed...\n"; print $socket "GET $target HTTP/1.1\n"; print $socket "Host: $server\n"; print $socket "Accept: /\n"; print $socket "Connection: close\n\n"; print "+ Connected!...\n...

fipsCMS <= 4.5 (index.asp) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= fipsCMS newProto = "tcp", PeerAddr = "$server", PeerPort = "$port" || di...

CVE-2006-3031

CVE-2006-3031 concerns multiple cross-site scripting (XSS) vulnerabilities in the web application component index.asp of fipsCMS 4.5 and earlier . The issue allows remote attackers to inject arbitrary web script or HTML via the parameters w , phcat , dayid , and calw . The description notes XSS i...

CVE-2006-3031

Multiple cross-site scripting XSS vulnerabilities in index.asp in fipsCMS 4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 w, 2 phcat, 3 dayid, and 4 calw parameters...

CVE-2006-3031: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.asp in fipsCMS 4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 w, 2 phcat, 3 dayid, and 4 calw parameters...

fipsCMS light - vulnerable to script injection.

fipsCMS lights is a freeware product of fipsasp.com. If you log on as admin, you can generate new pages in the CMS system. If you inject the "headline" field with scriptingcode like scriptalert‘code executed’/script, this will automaticly launch when a users visits that site. Please credit to:...

fipsCMS.txt

fipsCMS lights is a freeware product of fipsasp.com. If you log on as admin, you can generate new pages in the CMS system. If you inject the "headline" field with scriptingcode like alert‘code executed’, this will automaticly launch when a users visits that site. Please credit to: Preben Nyløkken...