fipsCMS <= 4.5 (index.asp) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= fipsCMS newProto = "tcp", PeerAddr = "$server", PeerPort = "$port" || di...

CVE-2006-3031

CVE-2006-3031 concerns multiple cross-site scripting (XSS) vulnerabilities in the web application component index.asp of fipsCMS 4.5 and earlier . The issue allows remote attackers to inject arbitrary web script or HTML via the parameters w , phcat , dayid , and calw . The description notes XSS i...

CVE-2006-3031

Multiple cross-site scripting XSS vulnerabilities in index.asp in fipsCMS 4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 w, 2 phcat, 3 dayid, and 4 calw parameters...

fipsCMS light - vulnerable to script injection.

fipsCMS lights is a freeware product of fipsasp.com. If you log on as admin, you can generate new pages in the CMS system. If you inject the "headline" field with scriptingcode like scriptalert‘code executed’/script, this will automaticly launch when a users visits that site. Please credit to:...

fipsCMS.txt

fipsCMS lights is a freeware product of fipsasp.com. If you log on as admin, you can generate new pages in the CMS system. If you inject the "headline" field with scriptingcode like alert‘code executed’, this will automaticly launch when a users visits that site. Please credit to: Preben Nyløkken...