CVE-2012-0933
Published Jan 29, 2012Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the…
Vendor/product archive
acidcat / acidcat_cms CVEs
Beta · best-effort7 CVEs tagged to acidcat / acidcat_cms — 0 Critical, 4 High, 2 Medium, 1 Low, 0 Unrated.
CVE-2010-0984
Published Mar 16, 2010Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing cre…
CVE-2010-0976
Published Mar 16, 2010Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attackers to restart the installation process and have unspecified o…
CVE-2008-1990
Published Apr 27, 2008Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) cID parameter to default.asp and the (2) username…
CVE-2008-1991
Published Apr 27, 2008Cross-site scripting (XSS) vulnerability in admin_colors_swatch.asp in Acidcat CMS 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the field parameter.
CVE-2008-1992
Published Apr 27, 2008Acidcat CMS 3.4.1 does not properly restrict access to (1) default_mail_aspemail.asp, (2) default_mail_cdosys.asp or (3) default_mail_jmail.asp, which allows remote attackers to b…
CVE-2008-1993
Published Apr 27, 2008Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary files.
Showing 1-7 of 7 CVEsPage 1 of 1