high7.5Public exploit code
CVE-2010-0976
Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attackers to restart the installation process an…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Acidcat CMS 3.5 - Multiple Vulnerabilities2010-01-03 · webapps · asp · Verified
Impact
Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attackers to restart the installation process and have unspecified other impact via requests to install.asp and other install_*.asp scripts. NOTE: the final installation screen states "Important: you must now delete all files beginning with 'install' from the root directory."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acidcat | Acidcat Cms | Versions 3.5.0, 3.5.1, 3.5.2, 3.5.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/1001-exploits/acidcatcms-disclose.txt
- http://www.exploit-db.com/exploits/10972
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55331
- http://packetstormsecurity.org/1001-exploits/acidcatcms-disclose.txt
- http://www.exploit-db.com/exploits/10972
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55331