CVE-2006-2841

CVE-2006-2841 affects AssoCIateD (aka ACID) CMS 1.1.3. The vulnerability is a set of PHP remote file inclusion weaknesses that allow an attacker to execute arbitrary PHP code by supplying a URL in the root_path parameter to five scripts: menu.php, profile.php, users.php, cache_mngt.php, and galle...

CVE-2006-3151

CVE-2006-3151 is a cross-site scripting (XSS) vulnerability in AssoCIateD (ACID) 1.2.0 and earlier. It affects index.php via the menu parameter, allowing remote attackers to inject arbitrary web script or HTML. No remediation or exploit details are provided in the connected documents.