Factosystem Factosystem Weblog

2 CVEs affecting Factosystem Factosystem Weblog. Latest disclosed: 2009-01-21. Critical: 0, High: 0.

Top CVEs affecting Factosystem Factosystem Weblog
CVESeverityScorePublishedSummary
CVE-2008-59352009-01-21Facto stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing…
CVE-2002-14992003-04-02Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via (1) the authornumber parameter i…