TI-2025-19204 CVE-2025-25968 · GHSA-4fg5-759r-24x3
DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control…
Priority LOW 31
DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability.
Vulnerabilities
9 records
TI-2025-16805 CVE-2025-22964 · GHSA-6j3f-6pm7-2pq3
DDSN Interactive cm3 Acora CMS version 10.1.1 has an unauthenticated time-based blind SQL…
Priority LOW 39
DDSN Interactive cm3 Acora CMS version 10.1.1 has an unauthenticated time-based blind SQL Injection vulnerability caused by insufficient input sanitization and validation in the "table" parameter.
TI-2013-04149 CVE-2013-4728 · GHSA-7fm9-rr67-4v8m
DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly…
Priority LOW 25
DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to obtain sensitive information via a ..
TI-2013-04148 CVE-2013-4727 · GHSA-chcg-mqpw-pv66
DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly…
Priority LOW 28
DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to obtain sensitive information via a request to Admin/top.aspx.
TI-2013-04146 CVE-2013-4725 · GHSA-qjvj-3jq9-w878
DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly…
Priority LOW 25
DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not set the secure flag for an unspecified cookie in an https session, which makes it easier for remote attacke…
TI-2013-04145 CVE-2013-4724 · GHSA-gvq9-xjgp-vhmp
DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly…
Priority LOW 25
DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remot…
TI-2013-04147 CVE-2013-4726 · GHSA-v7gx-3c46-37v4
Cross-site request forgery (CSRF) vulnerability in DDSN Interactive cm3 Acora CMS…
Priority LOW 32
Cross-site request forgery (CSRF) vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to hijack the authentication of unspecifi…
TI-2013-04144 CVE-2013-4723 · GHSA-45c5-9fh5-xjmw
Open redirect vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a…
Priority LOW 30
Open redirect vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allows remote attackers to redirect users to arbitrary web sites and conduct phishing…
TI-2013-04143 CVE-2013-4722 · GHSA-r2qh-q6fr-xvvg
Multiple cross-site scripting (XSS) vulnerabilities in Admin/login/default.asp in DDSN…
Priority LOW 24
Multiple cross-site scripting (XSS) vulnerabilities in Admin/login/default.asp in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allow remote attackers to inject ar…