advanced comment system vulnerabilities and fixes

Recent CVEs affecting advanced comment system, with upgrade or downgrade steps. 3 tracked.

Also searched as: advancedcommentsystem.

advanced comment system has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-12-23. Highest priority: CVE-2018-18619 (score 67/100).

• CVE-2020-35598 HIGH 7.5 DOWNGRADE ACS Advanced Comment System 1.0 is affected by Directory Traversal via an advanced_component_system/index.php?
• CVE-2018-18845 MEDIUM 6.1 DOWNGRADE internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php in Advanced Comment
• CVE-2018-18619 CRITICAL 9.8 DOWNGRADE internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnera

FAQ

How do I fix advanced comment system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is advanced comment system being exploited right now?

None of the tracked advanced comment system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which advanced comment system CVE should I patch first?

CVE-2018-18619 currently ranks highest (67/100): internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnera.

RSS feed for advanced comment system · ← Back to latest CVEs