acs blog vulnerabilities and fixes

Recent CVEs affecting acs blog, with upgrade or downgrade steps. 3 tracked.

Also searched as: acsblog.

acs blog has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-05-02. Highest priority: CVE-2005-1288 (score 51/100).

• CVE-2005-1288 HIGH 7.5 DOWNGRADE inc_login_check.asp ACS Blog 0.8 through 1.1.3 allows remote attackers to gain administrator privileges via th
• CVE-2005-0945 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1 allows remote attackers to inject arbitrary web scr
• CVE-2005-0802 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote attackers to

FAQ

How do I fix acs blog vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is acs blog being exploited right now?

None of the tracked acs blog CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which acs blog CVE should I patch first?

CVE-2005-1288 currently ranks highest (51/100): inc_login_check.asp ACS Blog 0.8 through 1.1.3 allows remote attackers to gain administrator privileges via th.

RSS feed for acs blog · ← Back to latest CVEs