Acidcat

9 CVEs across 2 Acidcat products. Browse Acidcat vulnerabilities, severities, and proof-of-concept exploits.

Acidcat products with known CVEs

ProductCVEs
Acidcat Cms7
Acidcat2
Acidcat CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2012-09332012-01-29Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remote attackers to inject arbitrary web scr…
CVE-2010-09842010-03-16Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a dat…
CVE-2010-09762010-03-16Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attackers to restart the installation process an…
CVE-2008-19932008-04-27Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary files.
CVE-2008-19922008-04-27Acidcat CMS 3.4.1 does not properly restrict access to (1) default_mail_aspemail.asp, (2) default_mail_cdosys.asp or (3) default_mail_jmail.asp, which allows r…
CVE-2008-19912008-04-27Cross-site scripting (XSS) vulnerability in admin_colors_swatch.asp in Acidcat CMS 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2008-19902008-04-27Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) cID parameter to default.asp a…
CVE-2005-43712005-12-20Acidcat 2.1.13 and earlier stores the database under the web root with insufficient access control, which allows remote attackers to obtain sensitive informati…
CVE-2005-43702005-12-20SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter to…