Fipsasp Fipscms Light vulnerabilities
2 known vulnerabilities affecting fipsasp/fipscms_light.
Total CVEs
2
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2008-3417P3HIGHCVSS 7.5PoC≤ 2.12008-07-31
CVE-2008-3417 [HIGH] CVE-2008-3417: SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows remote attacke
SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the r parameter, a different vector than CVE-2006-6115 and CVE-2007-2561.
nvd
CVE-2009-2022P3MEDIUMCVSS 5.0PoCv2.12009-06-09
CVE-2009-2022 [MEDIUM] CWE-264 CVE-2009-2022: fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control,
fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain sensitive information via a direct request for _fipsdb/db.mdb.
nvd