CVE-2005-4369

CVE-2005-4369 describes a cross-site scripting (XSS) vulnerability in Acuity CMS 2.6.2. The issue allows remote attackers to inject arbitrary web script or HTML through unspecified search parameters, potentially via strSearchKeywords to browse.asp. The NVD data lists a CVSS v2 base score of 4.3 (...

CVE-2012-4745

CVE-2012-4745 is an XSS vulnerability in Acuity CMS 2.6.2, exploitable via the UserName parameter in admin/login.asp. The NVD CVSS 2.0 base score is 4.3 (MEDIUM) with network access, no authentication, and client-side impact to integrity (partial) but no confidentiality/availability impact. Affec...