CVE

Id
5883  
CVE No.
CVE-2002-1499  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via (1) the authornumber parameter in author.asp, (2) the discussblurbid parameter in discuss.asp, (3) the name parameter in holdcomment.asp, and (4) the email parameter in holdcomment.asp.  
Phase
Proposed (20030317)  
Votes
ACCEPT(1) Cole | NOOP(2) Cox, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
33145 5883 CVE-2002-1499 BUGTRAQ:20020831 FactoSystem CMS Contains Multiple Vulnerabilities  View
33146 5883 CVE-2002-1499 URL:http://online.securityfocus.com/archive/1/290021  View
33147 5883 CVE-2002-1499 VULNWATCH:20020830 FactoSystem CMS Contains Multiple Vulnerabilities  View
33148 5883 CVE-2002-1499 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0097.html  View
33149 5883 CVE-2002-1499 MISC:http://sourceforge.net/tracker/index.php?func=detail&aid=602711&group_id=12668&atid=112668  View
33150 5883 CVE-2002-1499 XF:factosystem-asp-sql-injection(10000)  View
33151 5883 CVE-2002-1499 URL:http://www.iss.net/security_center/static/10000.php  View
33152 5883 CVE-2002-1499 BID:5600  View

Related JVN