Vulnerabilities

TI-2020-18100 CVE-2020-35598 · GHSA-3896-fhmw-qp2v

ACS Advanced Comment System 1.0 is affected by Directory Traversal via an…

MEDIUM 52

ACS Advanced Comment System 1.0 is affected by Directory Traversal via an advanced_component_system/index.php?ACS_path=..%2f URI.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.20839 Published 2020-12-23 No fix listed CWE-22

TI-2018-13351 CVE-2018-18845 · GHSA-p995-58rj-543m

internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php…

LOW 30

internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php in Advanced Comment System, version 1.0, contain a reflected cross-site scripting vulnerability via ACS_path.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01416 Published 2019-03-17 No fix listed CWE-79

TI-2018-13161 CVE-2018-18619 · GHSA-wcm8-xfhp-fcf8

internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an…

MEDIUM 51

internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query, allowing…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05984 Published 2018-11-29 No fix listed CWE-89

Vulnerabilities

Filters

ACS Advanced Comment System 1.0 is affected by Directory Traversal via an…

internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php…

internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an…