Read the docs

ARK-Web co., ltd.

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

ARK-Web co., ltd. records in CISA KEV

No ARK-Web co., ltd. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in A-form Pc Mobile · all components

Priority LOW 27

The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to m…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01263 Published 2011-11-03 No fix listed CWE-287
Priority LOW 22

Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerabili…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01042 Published 2011-11-03 No fix listed CWE-79
Open these records in search →