← Back

Advanced Comment System Project

advanced_comment_system_project

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Advanced Comment System
advanced_comment_system
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-35598
1Advanced Comment System Project
1Advanced Comment System
Jun 17, 2026
Dec 23, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
ACS Advanced Comment System 1.0 is affected by Directory Traversal via an advanced_component_system/index.php?ACS_path=..%2f URI. NOTE: this might be the same as CVE-2009-4623
CVE-2018-18845
1Advanced Comment System Project
1Advanced Comment System
Nov 21, 2024
Mar 21, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php in Advanced Comment System, version 1.0, contain a reflected cross-site scripting vulnerability via ACS_path. A remote unauthentic...Show more
internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php in Advanced Comment System, version 1.0, contain a reflected cross-site scripting vulnerability via ACS_path. A remote unauthenticated attacker could potentially exploit this vulnerability to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser. The product is discontinued.Show less
CVE-2018-18619
1Advanced Comment System Project
1Advanced Comment System
Nov 21, 2024
Nov 29, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query, allowing...Show more
internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query, allowing remote attackers to execute the sqli attack via a URL in the "page" parameter. NOTE: The product is discontinued.Show less