69 matches found
Acidcat ASP CMS 3.5 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/51608/info Acidcat ASP CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary...
Acidcat CMS v 3.3 (fckeditor) Shell Upload Vulnerability
Exploit for asp platform in category web applications ======================================================== Acidcat CMS v 3.3 fckeditor Shell Upload Vulnerability ======================================================== » Title : Acidcat CMS v 3.x fckeditor Shell Upload Vulnerability » Scrip...
Acidcat CMS 3.3 - FCKeditor Arbitrary File Upload
Acidcat CMS 3.3 - FCKeditor Arbitrary File Upload ============================================================================== » Acidcat CMS v 3.3 fckeditor Shell Upload Vulnerability ============================================================================== » Title : Acidcat CMS v 3.x...
Acidcat CMS 3.3 - 'FCKeditor' Arbitrary File Upload
============================================================================== » Acidcat CMS v 3.3 fckeditor Shell Upload Vulnerability ============================================================================== » Title : Acidcat CMS v 3.x fckeditor Shell Upload Vulnerability » Script :...
Acidcat CMS Multiple Vulnerabilities
Acidcat CMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-0976
Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attackers to restart the installation process and have unspecified other impact via requests to install.asp and other install.asp scripts. NOTE: the final installation screen states...
CVE-2010-0984
Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for databases/acidcat3.mdb...
Directory traversal
Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attackers to restart the installation process and have unspecified other impact via requests to install.asp and other install.asp scripts. NOTE: the final installation screen states...
Improper access control
Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for databases/acidcat3.mdb...
CVE-2010-0976
Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attackers to restart the installation process and have unspecified other impact via requests to install.asp and other install.asp scripts. NOTE: the final installation screen states...
CVE-2010-0984
Acidcat CMS up to version 3.5.3 stores sensitive data under the web root with insufficient access control, allowing remote attackers to download a credentials database (databases/acidcat_3.mdb) via a direct request. This causes Confidentiality impact as described in CVE-2010-0984 (NVD): base CVSS...
CVE-2010-0976
CVE-2010-0976 : Acidcat CMS 3.5.x is vulnerable because it does not prevent access to install.asp after installation completes, potentially allowing remote attackers to restart the installation process and trigger other related install_*.asp actions. The final installation note warns to delete al...
CVE-2010-0984
Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for databases/acidcat3.mdb...
Acidcat CMS 3.5 Database Disclosure
============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : Forever RevengeHack.Com-Ar-Ge.Org Acildi...
Acidcat CMS 3.5 - Multiple Vulnerabilities
============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : Forever RevengeHack.Com-Ar-Ge.Org Acildi...
Acidcat CMS 3.5 - Multiple Vulnerabilities
Acidcat CMS 3.5 - Multiple Vulnerabilities ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note...
Acidcat CMS v3.5 Multiple Vulnerabilities
Exploit for unknown platform in category web applications ========================================= Acidcat CMS v3.5 Multiple Vulnerabilities ========================================= » Script: Mini-NUKE v2.3 Freehost » Language: ASP » Download:...
Sql injection
Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the 1 cID parameter to default.asp and the 2 username parameter to mainlogin2.asp...
CVE-2008-1990
Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the 1 cID parameter to default.asp and the 2 username parameter to mainlogin2.asp...