Vulnerabilities

TI-2007-02491 CVE-2007-2579 · GHSA-474g-rjf9-53mq

Multiple cross-site scripting (XSS) vulnerabilities in ACP3 4.0 beta 3 allow remote…

LOW 29

Multiple cross-site scripting (XSS) vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to inject arbitrary web script or HTML via (1) the form[mail] parameter to contact/contact/index.php; the (2) form[mods][] or…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01562 Published 2007-05-09 No fix listed

TI-2007-02490 CVE-2007-2578 · GHSA-pvg7-hvf6-hwvw

Unspecified vulnerability in search/list/action_search/index.php in ACP3 4.0 beta 3…

LOW 37

Unspecified vulnerability in search/list/action_search/index.php in ACP3 4.0 beta 3 allows remote attackers to have unknown impact, relating to "Cookie Manipulation", via the form[search_term] parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02149 Published 2007-05-09 No fix listed

TI-2007-02489 CVE-2007-2577 · GHSA-5hf6-562j-g393

Multiple SQL injection vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to…

LOW 37

Multiple SQL injection vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to execute arbitrary SQL commands via (1) the mode parameter to feeds.php, the (2) form[cat] parameter to (a) news/list/index.php or (b) ce…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02012 Published 2007-05-09 No fix listed

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in ACP3 4.0 beta 3 allow remote…

Unspecified vulnerability in search/list/action_search/index.php in ACP3 4.0 beta 3…

Multiple SQL injection vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to…