CVE-2008-1991

Acidcat CMS 3.4.1 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in admin_colors_swatch.asp in Acidcat CMS 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the field parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by BugReport.IR · textwebappsphp

https://www.exploit-db.com/exploits/5478

View Code ZIP pw:eip

References (7)

[Exploit] http://bugreport.ir/index.php?/36

[Vendor Advisory] http://secunia.com/advisories/29916

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/491129/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/28868

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/5478

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/41919

[Third Party Advisory] http://securityreason.com/securityalert/3842

Scores

EPSS 0.0715

EPSS Percentile 91.4%

Classification

CWE

CWE-79

Status draft

Affected Products (1)

acidcat/acidcat_cms

Timeline

Published Apr 27, 2008

Tracked Since Feb 18, 2026