73 matches found
CVE-2004-1786
CVE-2004-1786 affects PortalApp and stems from insufficient access control that places user credentials under the web root. The vulnerability enables remote attackers to access sensitive information by directly requesting 8275.mdb. Connected sources confirm this exposure but do not document a pat...
CVE-2005-0949
Multiple cross-site scripting XSS vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the 1 contenttype or 2 keywords parameter...
CVE-2005-0948
SQL injection vulnerability in adclick.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via the bannerid parameter...
CVE-2005-0948
CVE-2005-0948 is a SQL injection vulnerability in PortalApp’s ad_click.asp that allows remote attackers to execute arbitrary SQL via the banner_id parameter. The NVD entry confirms the flaw affects PortalApp and describes a network-accessible, low-attack‑complexity vector with partial integrity/c...
CVE-2005-0949
CVE-2005-0949 describes multiple cross-site scripting (XSS) vulnerabilities in the PortalApp’s content.asp. The flaws allow remote attackers to inject arbitrary web script or HTML via the parameters contenttype or keywords . The NVD entry provides a base score of 4.3 (Medium) with network attack ...
CVE-2005-0948
SQL injection vulnerability in adclick.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via the bannerid parameter...
CVE-2005-0949
Multiple cross-site scripting XSS vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the 1 contenttype or 2 keywords parameter...
Multiple sql injection, and xss vulnerabilities in PortalApp
Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Severity: Medium Title: Multiple sql injection, and xss vulnerabilities in PortalApp. Date: March 30, 2005 Vendor: AspApp Vendor site: http://www.aspapp.com Summary: There are multiple sql injection, xss...
ASP PortalApp Multiple SQL Injection
The remote host is running ASP PortalApp, a web application software written in ASP. There is a flaw in the remote software that could allow anyone to inject arbitrary SQL commands, which could in turn be used to gain administrative access on the remote host. In addition, a path disclosure and...
portalApp.txt
This is a multi-part message in MIME format. ------=NextPart000004601C53454.58BFA8E0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab...
CVE-2004-1786
PortalApp places user credentials under the web root with insufficient access control, which allows remote attackers to gain access to sensitive information via a direct request to 8275.mdb...
ASPApp PortalApp - Remote User Database Access
source: https://www.securityfocus.com/bid/9354/info A problem has been identified in ASPapp PortalApp when user credentials are stored on a system. Because of this, an attacker may be able to gain unauthorized access to sensitive information. http://www.example.com/APP Portall/data/8275.mdb...