VULNERABILITY INTELLIGENCE
CVE-2002-1499
CVSS score7.5 NONE
EPSS probability2.48%
CISA KEVNot currently listed
Published2003-04-02
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via (1) the authornumber parameter in author.asp, (2) the discussblurbid parameter in discuss.asp, (3) the name parameter in holdcomment.asp, and (4) the email parameter in holdcomment.asp.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other
Primary references
- cve@mitre.org
- cve@mitre.org — Exploit, Vendor Advisory
- cve@mitre.org
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Exploit, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory