HOMEVULNERABILITIESVENDORSPortalapp

PortalappCVEs & Vulnerabilities

5 CVEs affecting Portalapp products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

5 CVEs→ All vendors

Most Affected Products

portalapp 5
CVE-2008-4615CRITICAL

Unspecified vulnerability in i_utils.asp in PortalApp before 4.01a has unknown impact and attack vectors.

20 Oct 2008
10.0
CVSS
CVE-2008-4614HIGHpoc

PortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which allows remote attackers to create and delete forums, topics, and replies.

20 Oct 2008
7.5
CVSS
CVE-2008-4613HIGHpoc

SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands via the sortby parameter.

20 Oct 2008
7.5
CVSS
CVE-2008-4612MEDIUMpoc

Cross-site scripting (XSS) vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter to (1) forums.asp and (2) content.asp.

20 Oct 2008
4.3
CVSS
CVE-2007-3252HIGH

PortalApp stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 8691.mdb, a different vector than CVE-2004-1786.

18 Jun 2007
7.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database