factosystem records
2 published records for vendor factosystem.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2002-1499Proof of concept | Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via (1) the authofactosystem · factosystem weblog | High7.5 | — | 2.4% | Apr 2, 2003 |
20Monitor | CVE-2008-5935No exploit | Facto stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the databafactosystem · factosystem weblog · CWE-264 | Medium5.0 | — | 1.2% | Jan 21, 2009 |
- CVE-2002-149931Monitor
Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via (1) the autho
HighCVSS 7.5Proof of conceptEPSS 2%factosystem · factosystem weblogApr 2, 2003
- CVE-2008-593520Monitor
Facto stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the databa
MediumCVSS 5.0No exploitEPSS 1%factosystem · factosystem weblogJan 21, 2009