26 matches found
CVE-2024-50658
Server-Side Template Injection SSTI was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file...
CVE-2024-50660
File Upload Bypass was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the file upload functionality...
CVE-2024-50659
Cross Site Scripting vulnerability iPublish Media Solutions AdPortal 3.0.39 allows a remote attacker to escalate privileges via the shippingAsBilling parameter in updateuserinfo.html...
CVE-2024-50660
File Upload Bypass was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the file upload functionality...
CVE-2024-50659
Cross Site Scripting vulnerability iPublish Media Solutions AdPortal 3.0.39 allows a remote attacker to escalate privileges via the shippingAsBilling parameter in updateuserinfo.html...
CVE-2024-50660
File Upload Bypass was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the file upload functionality...
CVE-2024-50659
Cross Site Scripting vulnerability iPublish Media Solutions AdPortal 3.0.39 allows a remote attacker to escalate privileges via the shippingAsBilling parameter in updateuserinfo.html...
CVE-2024-50658
Server-Side Template Injection SSTI was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file...
CVE-2024-50658
Server-Side Template Injection SSTI was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file...
iPublish AdPortal cross-site scripting vulnerability
iPublish AdPortal is a self-service newspaper advertising platform from iPublish, Inc. A security vulnerability exists in iPublish AdPortal version 3.0.39, which stems from a cross-site scripting vulnerability that allows remote attackers to elevate privileges via the shippingAsBilling parameter ...
CVE-2024-50660: Improper Control of Generation of Code
File Upload Bypass was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the file upload functionality...
iPublish AdPortal code injection vulnerability
iPublish AdPortal is a self-service newspaper advertising platform from iPublish, Inc. A security vulnerability exists in iPublish AdPortal version 3.0.39 that stems from the presence of server-side template injection SSTI, which allows remote attackers to execute arbitrary code via the...
iPublish AdPortal code injection vulnerability
iPublish AdPortal is a self-service newspaper advertising platform from iPublish, Inc. A security vulnerability exists in iPublish AdPortal version 3.0.39, which stems from the presence of a file upload bypass that allows remote attackers to execute arbitrary code via the file upload feature...
PT-2025-2879
Name of the Vulnerable Software and Affected Versions iPublish Media Solutions AdPortal version 3.0.39 Description A Cross Site Scripting issue allows a remote attacker to escalate privileges via the shippingAsBilling parameter in the "updateuserinfo.html" endpoint. Recommendations For iPublish...
PT-2025-2878 · Adportal · Adportal
Name of the Vulnerable Software and Affected Versions: AdPortal version 3.0.39 Description: A Server-Side Template Injection SSTI issue was found, allowing a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in the updateuserinfo.html file...
CVE-2024-50658
A Server-Side Template Injection (SSTI) vulnerability exists in iPublish AdPortal version 3.0.39 . This flaw allows a remote attacker to execute arbitrary code by exploiting the shippingAsBilling and firstname parameters within the updateuserinfo.html file. As a temporary workaround, it is recomm...
CVE-2024-50660
A File Upload Bypass vulnerability exists in iPublish AdPortal version 3.0.39 , a self-service newspaper advertising platform. This flaw allows a remote attacker to bypass file upload security checks to execute arbitrary code via the file upload functionality. While specific technical root causes...
CVE-2024-50659
A Cross-Site Scripting (XSS) vulnerability exists in iPublish Media Solutions AdPortal version 3.0.39 . This flaw allows a remote attacker to escalate privileges by exploiting the shippingAsBilling parameter within the updateuserinfo.html endpoint. While no official patch is currently documented,...
