CVE-2002-1499

Published: Apr 2, 2003Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via (1) the authornumber parameter in author.asp, (2) the discussblurbid parameter in discuss.asp, (3) the name parameter in holdcomment.asp, and (4) the email parameter in holdcomment.asp.

Affected (3)

Products: Factosystem: Factosystem Weblog

1 product

Factosystem Weblog

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Factosystem Factosystem Weblog	Version 0.9b
Factosystem Factosystem Weblog	Version 1.0_beta
Factosystem Factosystem Weblog	Version 1.1_beta

References (10)

http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0097.html

Source: cve@mitre.org

http://online.securityfocus.com/archive/1/290021

Source: cve@mitre.org

ExploitVendor Advisory

http://sourceforge.net/tracker/index.php?func=detail&aid=602711&group_id=12668&atid=112668

Source: cve@mitre.org

http://www.iss.net/security_center/static/10000.php

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/5600

Source: cve@mitre.org

ExploitVendor Advisory

http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0097.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://online.securityfocus.com/archive/1/290021

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://sourceforge.net/tracker/index.php?func=detail&aid=602711&group_id=12668&atid=112668

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/10000.php

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/5600

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

Timeline

No history available yet.