73 matches found
PortalApp 4.0 (SQL/XSS/Auth Bypasses) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ===================================================================== PortalApp 4.0 SQL/XSS/Auth Bypasses Multiple Remote Vulnerabilities ===================================================================== Title: PortalApp 4.0 Multiple...
PortalApp 4.0 - SQL Injection / Cross-Site Scripting / Authentication Bypass
Title: PortalApp 4.0 Multiple vulnerabilities Discovered By: r3dm0v3 http://r3dm0v3.persianblog.ir r3dm0v3 4t yahoodotcom Tehran - Iran Vendor: http://www.portalapp.com Vulnerable Version: 4.0, prior versions maybe vulnerable Remote Exploit: Yes Dork: "Copyright @2007 Iatek LLC" Fix: Not Availabl...
PortalApp 4.0 - SQL Injection Cross-Site Scripting Authentication Bypass
PortalApp 4.0 - SQL Injection Cross-Site Scripting Authentication Bypass Title: PortalApp 4.0 Multiple vulnerabilities Discovered By: r3dm0v3 http://r3dm0v3.persianblog.ir r3dm0v3 4t yahoodotcom Tehran - Iran Vendor: http://www.portalapp.com Vulnerable Version: 4.0, prior versions maybe vulnerabl...
Unfixed XSS vulnerability at www.portalapp.com
Security researcher r080cy90r, has submitted on 16/11/2007 a cross-site-scripting XSS vulnerability affecting www.portalapp.com, which at the time of submission ranked 1724995 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is...
Improper access control
PortalApp stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 8691.mdb, a different vector than CVE-2004-1786...
CVE-2007-3252
PortalApp stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 8691.mdb, a different vector than CVE-2004-1786...
CVE-2007-3252
CVE-2007-3252 affects PortalApp. The issue is insufficient access control that stores sensitive information under the web root, enabling direct access to a database file (e.g., 8691.mdb) by remote attackers. The reports also reference a different vector than CVE-2004-1786 (8275.mdb). The connecte...
CVE-2007-3252
PortalApp stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 8691.mdb, a different vector than CVE-2004-1786...
gis-mdb.txt
Found By: Hasadya Raed Contact : [email protected] Greetz : Guardian Information Systems ----------------------- Script :PortalApp ==bypass Download :www.portalapp.net Dork:"Copyright @2007 Iatek LLC" or "powered by PortalApp" or"Copyright @2007 Iatek LLC powered by PortalApp"...
ByPass In PortalApp
Found By: Hasadya Raed Contact : [email protected] Greetz : Guardian Information Systems ----------------------- Script :PortalApp ==bypass Download :www.portalapp.net Dork:"Copyright @2007 Iatek LLC" or "powered by PortalApp" or"Copyright @2007 Iatek LLC powered by PortalApp"...
CVE-2005-4482
Cross-site scripting XSS vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the retpage parameter...
CVE-2005-4482
Cross-site scripting XSS vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the retpage parameter...
CVE-2005-4482
The CVE-2005-4482 entry describes a Cross-site Scripting (XSS) vulnerability in PortalApp 3.3 and earlier, exploitable via the ret_page parameter in login.asp. Affected component: login.asp within PortalApp; root cause: improper handling of the ret_page input enables injection of arbitrary script...
PortalApp XSS vuln.
PortalApp XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/portalapp-xss-vuln.html vendor:http://www.portalapp.com/ affected version:3.3 and prior Product Description: PortalApp is an open source Web application that combines content...
PortalApp 3.34.0 - login.asp Cross-Site Scripting
PortalApp 3.34.0 - login.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/16008/info PortalApp is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to hav...
PortalApp 3.3/4.0 - 'login.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16008/info PortalApp is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of...
PortalAppXSS.txt
http://www.snkenjoi.com/secadv/secadv8.txt sNKenjoi's Security Advisory: XSS Vunerabilities in PortalApp v3.3 Security Advisory: XSS Vunerabilities in PortalApp v3.3 Severity: Medium Title: XSS Vunerabilities in PortalApp v3.3 Vendor: Iatek Vendor Website: http://www.portalapp.com/ Proof of Conce...
CVE-2002-1659
CVE-2002-1659 affects PortalApp 2.2 where user_profile.asp allows local users to gain privileges by modifying the user_id variable. The root cause is manipulating a user_id parameter in the profile page, enabling local privilege escalation with complete impact on confidentiality, integrity, and a...