In-Portal CMS 5.2.0 Cross Site Scripting

Hello list! These are Cross-Site Scripting and Brute Force vulnerabilities in In-Portal CMS. ------------------------- Affected products: ------------------------- Vulnerable are In-Portal CMS 5.2.0 and previous versions. In version In-Portal CMS 5.2.1 at 31.08.2014 developers fixed XSS...

In-Portal CMS Cross Site Scripting

Hello list! After I informed developers in August about multiple vulnerabilities in In-Portal CMS and they answered they would fix them soon so wait for disclosure of the first vulnerabilities, I found new hole in this CMS at their official site. This is Cross-Site Scripting vulnerability in...

In-portal 5.0.3 - Remote Arbitrary File Upload Exploit

No description provided by source. ?php / ----------------------------------------------------------------- In-portal 5.0.3 Remote Arbitrary File Upload Exploit ----------------------------------------------------------------- 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

In-Portal In-Link 2.3.4 ADODB_DIR.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19824/info In-portal In-link is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...

In-Portal CMS Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 »...

CVE-2009-4986

Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the env parameter...

Directory traversal

Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the env parameter...

CVE-2009-4986

Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the env parameter...

CVE-2009-4986

Affected software: In-Portal 4.3.1. Description confirms a directory traversal vulnerability in index.php that allows remote attackers to read arbitrary files by supplying a ".." path in the env parameter when magic_quotes_gpc is disabled. This is the only clearly stated vulnerability mechanism i...

CVE-2009-4986: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the env parameter...

In-portal 5.0.3 Remote Arbitrary File Upload Exploit

In-portal is prone to a remote arbitrary file-upload vulnerability This issue may allow remote attackers to upload arbitrary files, including malicious scripts, and possibly to execute a script on the affected server. In-portal Web 2.0 CMS v5.0.3 is affected by this issue. Other or lowers version...

In-portal 5.0.3 Arbitrary File Upload

Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm eidelweiss member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Developers:...

In-portal 5.0.3 Remote Arbitrary File Upload Exploit

Exploit for php platform in category web applications ==================================================== In-portal 5.0.3 Remote Arbitrary File Upload Exploit ==================================================== Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

In-portal 5.0.3 - Arbitrary File Upload

In-portal 5.0.3 - Arbitrary File Upload Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm eidelweiss member from Inj3ct0r Team 1 1 0 0-...

In-portal 5.0.3 - Arbitrary File Upload

Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm eidelweiss member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

In-Portal 4.3.1 Local File Inclusion

Securitylab.ir Application Info: Name: In-Portal Version: 4.3.1 Website: http://www.in-portal.net Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & [email protected] Vulnerability Info: Type: Local File Inclusion Vulnerability Risk: Medium...

In-Portal 4.3.1 (index.php env) Local File Inclusion Vulnerability

No description provided by source. @ ===================================================================================@ / Title : Local File Inclusion Vulnerability \ Software : In-Portal 4.3.1 Vendor : http://www.in-portal.net/ - - Date : 01 August 2009 Indonesia Author : Angela Chang Contact ...

In-Portal 4.3.1 (index.php env) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== In-Portal 4.3.1 index.php env Local File Inclusion Vulnerability ================================================================== @ ====================email protected /...

In-portal 4.3.1 - index.php?env Local File Inclusion

In-portal 4.3.1 - index.php?env Local File Inclusion @ ===================================================================================@ / Title : Local File Inclusion Vulnerability \ Software : In-Portal 4.3.1 Vendor : http://www.in-portal.net/ - - Date : 01 August 2009 Indonesia Author :...

In-portal 4.3.1 - 'index.php?env' Local File Inclusion

@ ===================================================================================@ / Title : Local File Inclusion Vulnerability \ Software : In-Portal 4.3.1 Vendor : http://www.in-portal.net/ - - Date : 01 August 2009 Indonesia Author : Angela Chang Contact : [email protected] \ / @...