Advanced Comment System Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Advanced Comment System Project records in CISA KEV

No Advanced Comment System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Advanced Comment System 3 records MEDIUM

Records

3 records in Advanced Comment System · all components

TI-2020-18100 CVE-2020-35598 · GHSA-3896-fhmw-qp2v

ACS Advanced Comment System 1.0 is affected by Directory Traversal via an…

MEDIUM 52

ACS Advanced Comment System 1.0 is affected by Directory Traversal via an advanced_component_system/index.php?ACS_path=..%2f URI.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.20839 Published 2020-12-23 No fix listed CWE-22

TI-2018-13161 CVE-2018-18619 · GHSA-wcm8-xfhp-fcf8

internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an…

MEDIUM 51

internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query, allowing…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05984 Published 2018-11-29 No fix listed CWE-89

TI-2018-13351 CVE-2018-18845 · GHSA-p995-58rj-543m

internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php…

LOW 30

internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php in Advanced Comment System, version 1.0, contain a reflected cross-site scripting vulnerability via ACS_path.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01416 Published 2019-03-17 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0