Fipsasp

12 CVEs across 5 Fipsasp products. Browse Fipsasp vulnerabilities, severities, and proof-of-concept exploits.

Fipsasp products with known CVEs

ProductCVEs
Fipscms5
Fipscms Light2
Fipsforum2
Fipsgallery2
Fipsshop1
Fipsasp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2010-07652010-03-02fipsForum 2.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a dire…
CVE-2009-20222009-06-09fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file…
CVE-2008-37222008-08-20SQL injection vulnerability in forum/neu.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the kat parameter. NOTE: the provena…
CVE-2008-34172008-07-31SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the r parameter, a…
CVE-2008-21242008-05-09SQL injection vulnerability in modules/print.asp in fipsASP fipsCMS allows remote attackers to execute arbitrary SQL commands via the lg parameter.
CVE-2007-25612007-05-09SQL injection vulnerability in index.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter, a different vector tha…
CVE-2006-62432006-12-04Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) did parameter.
CVE-2006-61172006-11-26SQL injection vulnerability in index1.asp in fipsGallery 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the which parameter.
CVE-2006-61162006-11-26SQL injection vulnerability in default2.asp in fipsForum 2.6 and earlier allows remote attackers to execute arbitrary SQL commands via the kat parameter.
CVE-2006-61152006-11-26SQL injection vulnerability in index.asp in fipsCMS 4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the fid parameter.
CVE-2006-30312006-06-15Multiple cross-site scripting (XSS) vulnerabilities in index.asp in fipsCMS 4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via t…
CVE-2006-30222006-06-15Cross-site scripting (XSS) vulnerability in zoom.php in fipsGallery 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the path…