CVE-2025-22964

DDSN Interactive cm3 Acora CMS version 10.1.1 is vulnerable to an unauthenticated time-based blind SQL Injection due to insufficient input sanitization and validation in the "table" parameter . This flaw allows attackers to inject malicious SQL queries by incorporating user-supplied input without...

CVE-2025-25968

DDSN Interactive cm3 Acora CMS version 10.1.1 is vulnerable to an improper access control flaw. An attacker with editor-privileged access can exploit the file parameter via force browsing to access sensitive information, such as system administrator credentials (e.g., by referencing cm3.xml ). Th...

CVE-2013-4722

CVE-2013-4722 affects Acora CMS (DDSN cm3 Acora CMS) prior to or within versions 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1. The vulnerability is a reflected cross-site scripting (XSS) in Admin/login/default.asp caused by insufficient input validation and lack of output escaping for parameters us...

CVE-2013-4724

CVE-2013-4724 affects DDSN Interactive cm3 Acora CMS versions including 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1 (and possibly others). The issue is failure to set the HTTPOnly flag on a Set-Cookie header for an unspecified cookie, potentially allowing remote attackers to access sensitive cooki...

CVE-2013-4725

CVE-2013-4725 affects DDSN Interactive cm3 Acora CMS versions 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1 (and possibly others). Description: the CMS does not set the Secure flag on an unspecified cookie in HTTPS sessions, allowing an attacker to capture the cookie by intercepting its transmission...

CVE-2013-4726

CVE-2013-4726 concerns Acora CMS (CM3 AcoraCMS) in DDSN Interactive, affected versions include 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1 (and possibly others). The description states a Cross-site request forgery (CSRF) vulnerability that allows remote attackers to hijack the authentication of un...

CVE-2013-4723

CVE-2013-4723 describes an open redirect in DDSN Interactive cm3 Acora CMS. Affected versions include 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, and 5.5.0/1b-p1 (and possibly others). The underlying issue is a redirect via a URL parameter (the l parameter to track.aspx), allowing remote attackers to route us...

CVE-2013-4727

CVE-2013-4727 affects DDSN Interactive cm3 Acora CMS versions 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1 (and possibly others). Remote attackers can obtain sensitive information via Admin/top.aspx. Affected component is the CMS core (AcoraCMS), with information disclosure as the stated impact (CV...

CVE-2013-4728

CVE-2013-4728 affects DDSN Interactive cm3 Acora CMS versions such as 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1 (and possibly others). The vulnerability allows remote attackers to obtain sensitive information via a crafted .. (dot dot) in the l parameter, which reveals the installation path in a...