CVE-2008-1990

Description

References

• bugreport.ir/index.php · Exploit
• secunia.com/advisories/29916 · Vendor Advisory
• securityreason.com/securityalert/3842
• securityfocus.com/archive/1/491129/100/0/threaded
• securityfocus.com/bid/28868 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/41918
• exploit-db.com/exploits/5478

More vulnerabilities in acidcat cms

• CVE-2012-0933LOW 2.6Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remote attackers to injec…
• CVE-2010-0984MEDIUM 5.0Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attacker…
• CVE-2010-0976HIGH 7.5Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attackers to restart the inst…
• CVE-2008-1993HIGH 7.5Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary files.
• CVE-2008-1992HIGH 7.5Acidcat CMS 3.4.1 does not properly restrict access to (1) default_mail_aspemail.asp, (2) default_mail_cdosys.asp or (3) default_mail_jmail.…