CVE-2004-0664

Directory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to list arbitrary directories via a .. dot dot in the files parameter...

CVE-2004-0663

CVE-2004-0663 affects PowerPortal 1.x, where a cross-site scripting (XSS) flaw exists in modules.php. The vulnerability enables injection of arbitrary script or HTML via (1) id in the private_messages module, (2) search in the links and content modules, and (3) files in the gallery module. These ...

CVE-2004-0663

Cross-site scripting XSS vulnerability in modules.php in PowerPortal 1.x allows remote attackers to inject arbitrary script or HTML via the 1 id parameter to the a privatemessages module; 2 search parameter to the b links and c content modules; and 3 files parameter to the gallery module...

CVE-2004-0662

PowerPortal 1.x allows remote attackers to gain sensitive information via invalid or missing parameters in HTTP requests to 1 resize.php or 2 modules.php, which reveals the path in an error message...

[Full-Disclosure] Multiple vulnerabilities PowerPortal

http://www.swp-zone.org/archivos/advisory-07.txt ------------------------------------------------------------------------------------------------- :.: Multiple vulnerabilities PowerPortal :.: PROGRAM: PowerPortal HOMEPAGE: http://powerportal.sourceforge.net/ VERSION: v1.x BUG: Multiple...

PowerPortal 1.11.3 - modules.php Traversal Arbitrary Directory Listing

PowerPortal 1.11.3 - modules.php Traversal Arbitrary Directory Listing source: https://www.securityfocus.com/bid/10622/info PowerPortal is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect t...

PowerPortal 1.1/1.3 - 'modules.php' Traversal Arbitrary Directory Listing

source: https://www.securityfocus.com/bid/10622/info PowerPortal is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PowerPortal is prone to multiple cross-site scripting...

PowerPortal v1.1b Cross-Site Scripting Vulnerability

PowerPortal v1.1b Cross-Site Scripting Vulnerability Critical: Less critical Impact: Cross Site Scripting Where: From remote Software: PowerPortal v1.1b Description: Cross-Site Scripting attack in this CMS can be exploited by malicious users. The vulnerabilities are caused due to missing validati...