Vulnerabilities

TI-2005-01214 CVE-2005-1288 · GHSA-26ch-h6w2-4q6g

inc_login_check.asp ACS Blog 0.8 through 1.1.3 allows remote attackers to gain…

LOW 36

inc_login_check.asp ACS Blog 0.8 through 1.1.3 allows remote attackers to gain administrator privileges via the "in" value in a cookie.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01727 Published 2005-04-26 No fix listed

TI-2005-00886 CVE-2005-0945 · GHSA-h645-h8mv-9xm5

Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1 allows remote attackers to…

LOW 24

Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1 allows remote attackers to inject arbitrary web script or HTML via onmouseover or onload events in (1) img, (2) link, or (3) mail tags.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01736 Published 2005-04-03 No fix listed

TI-2005-00746 CVE-2005-0802 · GHSA-r862-vghc-7qh7

Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b…

LOW 24

Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote attackers to execute arbitrary web script or HTML via the search parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01911 Published 2005-03-20 No fix listed

Vulnerabilities

Filters

inc_login_check.asp ACS Blog 0.8 through 1.1.3 allows remote attackers to gain…

Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1 allows remote attackers to…

Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b…