Vulnerabilities > Acnews
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-08-23 | CVE-2005-2677 | Information Disclosure vulnerability in ACNews ACNews stores the database in a file under the web document root with a db.inc extension and insufficient access control, which allows remote attackers to obtain sensitive information such as the full pathname of the server. | 5.0 |
| 2005-04-13 | CVE-2005-1149 | SQL Injection vulnerability in ACNews Login.ASP SQL injection vulnerability in admin/login.asp in aspclick.it ACNews 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters. | 7.5 |