advanced comment system project vulnerabilities

Recent CVEs affecting advanced comment system project products. 3 tracked.

advanced comment system project has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-12-23. Highest priority: CVE-2018-18619 (score 67/100).

• CVE-2020-35598 HIGH 7.5 DOWNGRADE ACS Advanced Comment System 1.0 is affected by Directory Traversal via an advanced_component_system/index.php?
• CVE-2018-18845 MEDIUM 6.1 DOWNGRADE internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php in Advanced Comment
• CVE-2018-18619 CRITICAL 9.8 DOWNGRADE internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnera

FAQ

How do I fix advanced comment system project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is advanced comment system project being exploited right now?

None of the tracked advanced comment system project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which advanced comment system project CVE should I patch first?

CVE-2018-18619 currently ranks highest (67/100): internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnera.

Products

• advanced comment system

RSS feed for advanced comment system project · ← Back to latest CVEs