Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
acidcat acidcat cms vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2010-0984
Acidcat CMS 3.5.3 and previous versions stores sensitive information under the web root with insufficient access control, which allows remote malicious users to download a database containing credentials via a direct request for databases/acidcat_3.mdb.
Acidcat Acidcat Cms 3.4.0
Acidcat Acidcat Cms
Acidcat Acidcat Cms 2.1.13
Acidcat Acidcat Cms 2.1.12
Acidcat Acidcat Cms 3.5.2
Acidcat Acidcat Cms 3.5.1
Acidcat Acidcat Cms 3.5.0
Acidcat Acidcat Cms 2.1.11
Acidcat Acidcat Cms 3.3.5
Acidcat Acidcat Cms 3.4.2
Acidcat Acidcat Cms 3.4.1
1 EDB exploit
NA
CVE-2010-0976
Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote malicious users to restart the installation process and have unspecified other impact via requests to install.asp and other install_*.asp scripts. NOTE: the final instal...
Acidcat Acidcat Cms 3.5.1
Acidcat Acidcat Cms 3.5.0
Acidcat Acidcat Cms 3.5.3
Acidcat Acidcat Cms 3.5.2
1 EDB exploit
NA
CVE-2012-0933
Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to (1) admin_colors.asp, (2) admin_config.asp, and (3) admin_cat_add.asp in admin/.
Acidcat Acidcat Cms 3.5.1
Acidcat Acidcat Cms 3.5.2
Acidcat Acidcat Cms 3.5.6
1 EDB exploit
NA
CVE-2008-1992
Acidcat CMS 3.4.1 does not properly restrict access to (1) default_mail_aspemail.asp, (2) default_mail_cdosys.asp or (3) default_mail_jmail.asp, which allows remote malicious users to bypass restrictions and relay email messages with modified From, FromName, and To fields.
Acidcat Acidcat Cms 3.4.1
1 EDB exploit
NA
CVE-2008-1990
Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote malicious users to execute arbitrary SQL commands via the (1) cID parameter to default.asp and the (2) username parameter to main_login2.asp.
Acidcat Acidcat Cms 3.4.1
1 EDB exploit
NA
CVE-2008-1991
Cross-site scripting (XSS) vulnerability in admin_colors_swatch.asp in Acidcat CMS 3.4.1 allows remote malicious users to inject arbitrary web script or HTML via the field parameter.
Acidcat Acidcat Cms 3.4.1
1 EDB exploit
NA
CVE-2008-1993
Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote malicious users to upload arbitrary files.
Acidcat Acidcat Cms 3.4.1
1 EDB exploit
NA
CVE-2005-4370
SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and previous versions allows remote malicious users to execute arbitrary SQL commands via the ID parameter to default.asp.
Acidcat Acidcat 2.1.12
Acidcat Acidcat 2.1.13
Acidcat Acidcat 2.1.11
1 EDB exploit
NA
CVE-2005-4371
Acidcat 2.1.13 and previous versions stores the database under the web root with insufficient access control, which allows remote malicious users to obtain sensitive information via a request to databases/acidcat.mdb.
Acidcat Acidcat 2.1.11
Acidcat Acidcat 2.1.12
Acidcat Acidcat 2.1.13
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581
reflected XSS
CVE-2024-26925
CVE-2024-27956
LFI
CVE-2024-3607
CVE-2024-3107
CVE-2024-3295
SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started