Accscripts

accscripts

6 CVEs • 4 products

Products (4)

Click to collapse

Toggle

Acc Real Estate

acc_real_estate

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-4906 1Accscripts 1Acc Php Email Apr 29, 2026 Jun 25, 2010 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords.
CVE-2009-4905 1Accscripts 1Acc Statistics Apr 29, 2026 Jun 25, 2010 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to hijack the authentication of administrators for requests that change (1) passwords, (2) usernames, a...Show more Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to hijack the authentication of administrators for requests that change (1) passwords, (2) usernames, and (3) e-mail addresses.Show less
CVE-2008-6294 1Accscripts 1Acc Statistics Apr 23, 2026 Feb 26, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the username_cookie cookie to "admin."
CVE-2008-6293 1Accscripts 1Acc Real Estate Apr 23, 2026 Feb 26, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 admin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the username_cookie to "admin."
CVE-2008-6292 1Accscripts 1Acc Autos Apr 23, 2026 Feb 26, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 Acc Autos 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the (1) username_cookie to "admin," (2) right_cookie to "1," and (3) id_cookie to "1."
CVE-2008-6291 1Accscripts 1Acc Php Email Apr 23, 2026 Feb 26, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 Acc PHP eMail 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the NEWSLETTERLOGIN cookie to "admin".