advanced_comment_system_project CVEs

Beta · best-effort

3 CVEs tagged to vendor advanced_comment_system_project — 1 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2020-35598

Published Dec 23, 2020

ACS Advanced Comment System 1.0 is affected by Directory Traversal via an advanced_component_system/index.php?ACS_path=..%2f URI. NOTE: this might be the same as CVE-2009-4623

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2018-18845

Published Mar 21, 2019

internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php in Advanced Comment System, version 1.0, contain a reflected cross-site scripting vulnera…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-18619

Published Nov 29, 2018

internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data b…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1