ID de Prueba:	1.3.6.1.4.1.25623.1.0.900750
Categoría:	Web application abuses
Título:	Acidcat CMS Multiple Vulnerabilities
Resumen:	Acidcat CMS is prone to multiple vulnerabilities.
Descripción:	Summary: Acidcat CMS is prone to multiple vulnerabilities. Vulnerability Insight: The flaws are due to: - 'install.asp' and other 'install_*.asp' scripts which can be accessed even after the installation finishes, which might allow remote attackers to restart the installation process. - improper access restrictions to the 'acidcat_3.mdb' database file in the databases directory. An attacker can download the database containing credentials via a direct request for databases/acidcat_3.mdb. Vulnerability Impact: Successful exploitation will allow remote attackers to restart the installation process and an attacker can download the database containing credentials via a direct request for databases/acidcat_3.mdb. Affected Software/OS: Acidcat CMS 3.5.3 and prior Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0976 http://www.exploit-db.com/exploits/10972 http://packetstormsecurity.org/1001-exploits/acidcatcms-disclose.txt XForce ISS Database: acidcat-install-info-disclosure(55331) https://exchange.xforce.ibmcloud.com/vulnerabilities/55331 Common Vulnerability Exposure (CVE) ID: CVE-2010-0984 http://osvdb.org/61436 http://secunia.com/advisories/38084 XForce ISS Database: acidcat-acidcat3-info-disclosure(55329) https://exchange.xforce.ibmcloud.com/vulnerabilities/55329
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.