Fipsforum

fipsforum

Vendor: Fipsasp • 2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2010-0765 1Fipsasp 1Fipsforum Apr 29, 2026 Mar 2, 2010 N/A· v4 N/A· v3 5.0 MEDIUM· v2 fipsForum 2.6 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for _database/forumFips.mdb.
CVE-2006-6116 1Fipsasp 1Fipsforum Apr 23, 2026 Nov 26, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in default2.asp in fipsForum 2.6 and earlier allows remote attackers to execute arbitrary SQL commands via the kat parameter.