Fipsasp: >> Fipscms Light Security Vulnerabilities
fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain sensitive information via a direct request for _fipsdb/db.mdb.
CVSS Score
5.0
EPSS Score
0.017
Published
2009-06-09
SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the r parameter, a different vector than CVE-2006-6115 and CVE-2007-2561.
CVSS Score
7.5
EPSS Score
0.002
Published
2008-07-31