Vulnerabilities

TI-2009-01930 CVE-2009-2022 · GHSA-j3jp-46wx-ch5m

fipsCMS Light 2.1 stores sensitive information under the web root with insufficient…

LOW 31

fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain sensitive information via a direct request for _f…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05159 Published 2009-06-09 No fix listed CWE-264

TI-2008-03278 CVE-2008-3417 · GHSA-jqpm-r7cv-6j3j

SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows…

LOW 35

SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the r parameter, a different vector than CVE-2006-6115 and CVE-2007-2561.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01042 Published 2008-07-31 No fix listed CWE-89

Vulnerabilities

Filters

fipsCMS Light 2.1 stores sensitive information under the web root with insufficient…

SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows…