Lucene search
K

6 matches found

Prion
Prion
added 2009/08/25 10:30 a.m.11 views

Improper access control

All Club CMS ACCMS 0.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database configuration information, including credentials, via a direct request to accms.dat...

7.5CVSS6.8AI score0.02974EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2009/08/25 10:0 a.m.13 views

CVE-2008-7069

All Club CMS ACCMS 0.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database configuration information, including credentials, via a direct request to accms.dat...

6.3AI score0.02974EPSS
Exploits0References2
CVE
CVE
added 2009/08/25 10:0 a.m.37 views

CVE-2008-7069

CVE-2008-7069 affects All Club CMS (ACCMS) 0.0.2 and earlier. The vulnerability is improper access control that stores sensitive information under the web root, enabling remote attackers to retrieve database configuration data, including credentials, via a direct request to accms.dat. CVSSv2 base...

7.5CVSS6.5AI score0.02974EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2008/02/06 12:0 p.m.16 views

Directory traversal

Directory traversal vulnerability in index.php in All Club CMS ACCMS 0.0.1f and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the classname parameter...

6.8CVSS7.7AI score0.0322EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2008/02/06 11:0 a.m.40 views

CVE-2008-0601

CVE-2008-0601 describes an SQL injection in All Club CMS (ACCMS)

7.5CVSS8.4AI score0.00404EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2008/02/06 11:0 a.m.44 views

CVE-2008-0602

CVE-2008-0602 affects All Club CMS (ACCMS) versions 0.0.1f and earlier. The vulnerability is a directory traversal flaw in index.php that allows remote attackers to include and execute arbitrary local files via traversal sequences in the class_name parameter. Client impact per CVSS2 is Partial co...

6.8CVSS7.2AI score0.0322EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder