high7.5Public exploit code
CVE-2020-35598
ACS Advanced Comment System 1.0 is affected by Directory Traversal via an advanced_component_system/index.php?ACS_path=..%2f URI.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Advanced Comment System 1.0 - 'ACS_path' Path Traversal2021-01-04 · webapps · php
Impact
ACS Advanced Comment System 1.0 is affected by Directory Traversal via an advanced_component_system/index.php?ACS_path=..%2f URI. NOTE: this might be the same as CVE-2009-4623
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advanced Comment System Project | Advanced Comment System | Version 1.0 |