Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2010-0984

Disclosure Date: March 16, 2010 (last updated October 04, 2023)
Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for databases/acidcat_3.mdb.
0
0
Attacker Value
Unknown

CVE-2008-1991

Disclosure Date: April 27, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in admin_colors_swatch.asp in Acidcat CMS 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the field parameter.
0
0
Attacker Value
Unknown

CVE-2008-1990

Disclosure Date: April 27, 2008 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) cID parameter to default.asp and the (2) username parameter to main_login2.asp.
0
0
Attacker Value
Unknown

CVE-2008-1993

Disclosure Date: April 27, 2008 (last updated October 04, 2023)
Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary files.
0
0
Attacker Value
Unknown

CVE-2008-1992

Disclosure Date: April 27, 2008 (last updated October 04, 2023)
Acidcat CMS 3.4.1 does not properly restrict access to (1) default_mail_aspemail.asp, (2) default_mail_cdosys.asp or (3) default_mail_jmail.asp, which allows remote attackers to bypass restrictions and relay email messages with modified From, FromName, and To fields.
0
0