CVE-2002-1499

Опубликовано: 02 апр. 2003

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via (1) the authornumber parameter in author.asp, (2) the discussblurbid parameter in discuss.asp, (3) the name parameter in holdcomment.asp, and (4) the email parameter in holdcomment.asp.

Ссылки

http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0097.html
http://online.securityfocus.com/archive/1/290021
Exploit
Vendor Advisory
http://sourceforge.net/tracker/index.php?func=detail&aid=602711&group_id=12668&atid=112668
http://www.iss.net/security_center/static/10000.php
Vendor Advisory
http://www.securityfocus.com/bid/5600
Exploit
Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0097.html
http://online.securityfocus.com/archive/1/290021
Exploit
Vendor Advisory
http://sourceforge.net/tracker/index.php?func=detail&aid=602711&group_id=12668&atid=112668
http://www.iss.net/security_center/static/10000.php
Vendor Advisory
http://www.securityfocus.com/bid/5600
Exploit
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:factosystem:factosystem_weblog:0.9b:*:*:*:*:*:*:*

cpe:2.3:a:factosystem:factosystem_weblog:1.0_beta:*:*:*:*:*:*:*

cpe:2.3:a:factosystem:factosystem_weblog:1.1_beta:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.0053

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-w44x-44mv-xqq6

github

больше 3 лет назад