Skip to content
Noroxi

acidcat records

9 published records for vendor acidcat.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    9 records
    • CVE-2008-1992
      31Monitor

      Acidcat CMS 3.4.1 does not properly restrict access to (1) default_mail_aspemail.asp, (2) default_mail_cdosys.asp or (3) default_mail_jmail.

      HighCVSS 7.5Proof of conceptEPSS 2%

      acidcat · acidcat cmsApr 27, 2008

    • CVE-2008-1993
      31Monitor

      Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary files.

      HighCVSS 7.5Proof of conceptEPSS 2%

      acidcat · acidcat cmsApr 27, 2008

    • CVE-2010-0976
      31Monitor

      Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attackers to restart the inst

      HighCVSS 7.5Proof of conceptEPSS 2%

      acidcat · acidcat cmsMar 16, 2010

    • CVE-2005-4370
      30Monitor

      SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote attackers to execute arbitrary SQL commands via

      HighCVSS 7.5Proof of conceptEPSS 1%

      acidcat · acidcatDec 19, 2005

    • CVE-2008-1990
      30Monitor

      Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) cID paramet

      HighCVSS 7.5Proof of conceptEPSS 1%

      acidcat · acidcat cmsApr 27, 2008

    • CVE-2005-4371
      21Monitor

      Acidcat 2.1.13 and earlier stores the database under the web root with insufficient access control, which allows remote attackers to obtain

      MediumCVSS 5.0Proof of conceptEPSS 2%

      acidcat · acidcatDec 19, 2005

    • CVE-2010-0984
      21Monitor

      Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attacker

      MediumCVSS 5.0Proof of conceptEPSS 2%

      acidcat · acidcat cmsMar 16, 2010

    • CVE-2008-1991
      18Monitor

      Cross-site scripting (XSS) vulnerability in admin_colors_swatch.asp in Acidcat CMS 3.4.1 allows remote attackers to inject arbitrary web scr

      MediumCVSS 4.3Proof of conceptEPSS 1%

      acidcat · acidcat cmsApr 27, 2008

    • CVE-2012-0933
      11Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remote attackers to injec

      LowCVSS 2.6Proof of conceptEPSS 3%

      acidcat · acidcat cmsJan 29, 2012