26 matches found
PT-2025-2879
Name of the Vulnerable Software and Affected Versions iPublish Media Solutions AdPortal version 3.0.39 Description A Cross Site Scripting issue allows a remote attacker to escalate privileges via the shippingAsBilling parameter in the "updateuserinfo.html" endpoint. Recommendations For iPublish...
CVE-2024-50659: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability iPublish Media Solutions AdPortal 3.0.39 allows a remote attacker to escalate privileges via the shippingAsBilling parameter in updateuserinfo.html...
PT-2025-2878 · Adportal · Adportal
Name of the Vulnerable Software and Affected Versions: AdPortal version 3.0.39 Description: A Server-Side Template Injection SSTI issue was found, allowing a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in the updateuserinfo.html file...
CVE-2024-50658: Improper Control of Generation of Code
Server-Side Template Injection SSTI was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file...
CVE-2024-50659
A Cross-Site Scripting (XSS) vulnerability exists in iPublish Media Solutions AdPortal version 3.0.39 . This flaw allows a remote attacker to escalate privileges by exploiting the shippingAsBilling parameter within the updateuserinfo.html endpoint. While no official patch is currently documented,...
