Advanced Comment System (Advanced Comment System Project) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2020-12-23. Vendor: Advanced Comment System Project.

CVEs of Advanced Comment System

• CVE-2020-35598 - CVSS 7.5 (high), 2020-12-23: ACS Advanced Comment System 1.0 is affected by Directory Traversal via an advanced_component_system/index.php?ACS_path=..%2f URI. NOTE: this might be the same…
• CVE-2018-18845 - CVSS 6.1 (medium), 2019-03-21: internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php in Advanced Comment System, version 1.0, contain a reflected…
• CVE-2018-18619 - CVSS 9.8 (critical), 2018-11-29: internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability because it fails to sufficiently sanitize…