CVE-2010-0976

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.29%

Published

Mar 16, 2010

Modified

Apr 28, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBAcidcat CMS 3.5 - Multiple Vulnerabilities TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attackers to restart the installation process and have unspecified other impact via requests to install.asp and other install_*.asp scripts. NOTE: the final installation screen states "Important: you must now delete all files beginning with 'install' from the root directory."

Weaknesses (CWE)

CWE-264

Affected Products (4)

acidcat · acidcat_cmsvulnerable

References (6)

http://packetstormsecurity.org/1001-exploits/acidcatcms-disclose.txt

Exploit

http://www.exploit-db.com/exploits/10972

https://exchange.xforce.ibmcloud.com/vulnerabilities/55331

http://packetstormsecurity.org/1001-exploits/acidcatcms-disclose.txt

Exploit

http://www.exploit-db.com/exploits/10972

https://exchange.xforce.ibmcloud.com/vulnerabilities/55331

KEV Catalog EPSS Scores Vendors All CVEs