CVE-2012-0933

Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remote attackers to inject arbitrary web…

published January 29, 2012

CVSS
—
EPSS
4%
Percentile
90.0
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin_colors.asp, (2) admin_config.asp, and (3) admin_cat_add.asp in admin/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03845 · 90.0th percentile
Published
2012-01-29T02:00Z
EPSS history
Timeline
  • 29 JAN 02:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remote attackers to inject arbitrary web…
    cvelistv5