cbcvebase.

The Collective Acuity Cms vulnerabilities

2 known vulnerabilities affecting the_collective/acuity_cms.

Total CVEs
2
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM2

Vulnerabilities

Page 1 of 1
CVE-2012-4745P4MEDIUMCVSS 4.3PoCv2.6.22012-08-31
CVE-2012-4745 [MEDIUM] CWE-79 CVE-2012-4745: Cross-site scripting (XSS) vulnerability in admin/login.asp in Acuity CMS 2.6.2 allows remote attack Cross-site scripting (XSS) vulnerability in admin/login.asp in Acuity CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter.
nvd
CVE-2005-4369P4MEDIUMCVSS 4.3v2.6.22005-12-20
CVE-2005-4369 [MEDIUM] CVE-2005-4369: Cross-site scripting (XSS) vulnerability in Acuity CMS 2.6.2 allows remote attackers to inject arbit Cross-site scripting (XSS) vulnerability in Acuity CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly strSearchKeywords to browse.asp.
nvd