Fipscms Light

DATE	CVE	VULNERABILITY TITLE	RISK
2009-06-09	CVE-2009-2022	Permissions, Privileges, and Access Controls vulnerability in Fipsasp Fipscms Light 2.1 fipsCMS Light 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain sensitive information via a direct request for _fipsdb/db.mdb. network low complexity fipsasp CWE-264	5.0
2008-07-31	CVE-2008-3417	SQL Injection vulnerability in Fipsasp Fipscms Light SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the r parameter, a different vector than CVE-2006-6115 and CVE-2007-2561. network low complexity fipsasp CWE-89	7.5