Skip to main content

Advanced Comment System

2 CVEs product

Monthly

CVE-2020-35598 Dec 23, 19:15 HIGH POC THREAT This Week

ACS Advanced Comment System 1.0 is affected by Directory Traversal via an advanced_component_system/index.php?ACS_path=..%2f URI. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Path Traversal Advanced Comment System Advanced Comment System Project
NVD Exploit-DB
CVSS 3.1
7.5
EPSS
21.0%
CVE-2018-18619 Nov 29, 22:29 CRITICAL POC Act Now

internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Advanced Comment System Advanced Comment System Project
NVD Exploit-DB
CVSS 3.0
9.8
EPSS
4.2%
EPSS 21% CVSS 7.5
HIGH POC THREAT This Week

ACS Advanced Comment System 1.0 is affected by Directory Traversal via an advanced_component_system/index.php?ACS_path=..%2f URI. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Path Traversal Advanced Comment System +1
NVD Exploit-DB
EPSS 4% CVSS 9.8
CRITICAL POC Act Now

internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Advanced Comment System +1
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy