CVE-2009-1445

CVE-2009-1445 affects WebPortal CMS 0.8-beta. The vulnerability involves directory traversal in two vectors: (1) lang parameter to libraries/helpdocs/help.php allowing reading arbitrary files, and (2) error parameter to index.php enabling inclusion and execution of local files. Root cause: direct...

WebPortal CMS 0.8b Multiple Remote/Local File Inclusion Vulnerabilities

No description provided by source. ' -. ,'-. ,' ' .--.===.--. ' .%%. .. -'=' /%%/ \ |%%/ multi | |%%| ||.,-. %%| file |/ %\ // ' %\ include // , -'-. ,-. %\ /' ' |/' -=--=' ' -=-=- .' ||/ |||/ o o -=-=-=-==-=-=-=-=-=-=-=+-oooO---------+-=-=-=-=-=-=- | | | | script:webportal-0.8-beta...

WebPortal CMS 0.8beta Remote/Local File Inclusion

' -. ,'-. ,' ' .--.===.--. ' .%%. .. -'=' /%%/ \ |%%/ multi | |%%| ||.,-. %%| file |/ %\ // ' %\ include // , -'-. ,-. %\ /' ' |/' -=--=' ' -=-=- .' ||/ |||/ o o -=-=-=-==-=-=-=-=-=-=-=+-oooO---------+-=-=-=-=-=-=- | | | | script:webportal-0.8-beta...

WebPortal CMS 0.8b - Multiple LocalRemote File Inclusions

WebPortal CMS 0.8b - Multiple LocalRemote File Inclusions ' -. ,'-. ,' ' .--.===.--. ' .%%. .. -'=' /%%/ \ |%%/ multi | |%%| ||.,-. %%| file |/ %\ // ' %\ include // , -'-. ,-. %\ /' ' |/' -=--=' ' -=-=- .' ||/ |||/ o o -=-=-=-==-=-=-=-=-=-=-=+-oooO---------+-=-=-=-=-=-=- | | | |...

WebPortal CMS 0.8b Multiple Remote/Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================= WebPortal CMS 0.8b Multiple Remote/Local File Inclusion Vulnerabilities ======================================================================= ' -. ,'-. ,' '...

WebPortal CMS 0.8b - Multiple Local/Remote File Inclusions

' -. ,'-. ,' ' .--.===.--. ' .%%. .. -'=' /%%/ \ |%%/ multi | |%%| ||.,-. %%| file |/ %\ // ' %\ include // , -'-. ,-. %\ /' ' |/' -=--=' ' -=-=- .' ||/ |||/ o o -=-=-=-==-=-=-=-=-=-=-=+-oooO---------+-=-=-=-=-=-=- | | | | script:webportal-0.8-beta...

CVE-2008-4345

SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter...

Sql injection

SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter...

CVE-2008-4345

CVE-2008-4345 affects WebPortal CMS 0.7.4 and earlier. It is a SQL injection in download.php via the aid parameter allowing remote SQL command execution. NVD reports a base score of 7.5 (HIGH) with network attack vector, low complexity, no authentication. Connected documents do not provide additi...

CVE-2008-4345

SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter...

webportalcms-exec.txt

WebPortal POC : /index.php?m=admin&f=console&action=execute&code=id; passthruid;...

WebPortal CMS <= 0.7.4 (code) Remote Code Execution Vulnerability

No description provided by source. WebPortal = 0.7.4 code Remote Code Execution Vulnerability Download : http://webportal.ivanoculmine.com/download.php?mid=14 Vuln : ? if $GET"action" == "execute" eval stripslashes$POST"code"; ? POC : /index.php?m=admin&f=console&action=execute&code=id; passthrui...

WebPortal CMS 0.7.4 - code Remote Code Execution

WebPortal CMS 0.7.4 - code Remote Code Execution WebPortal POC : /index.php?m=admin&f=console&action=execute&code=id; passthruid; milw0rm.com 2008-09-23...

WebPortal CMS <= 0.7.4 (code) Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ================================================================= WebPortal CMS POC : /index.php?m=admin&f=console&action=execute&code=id; passthruid; 0day.today 2018-03-19...

WebPortal CMS 0.7.4 - 'code' Remote Code Execution

WebPortal POC : /index.php?m=admin&f=console&action=execute&code=id; passthruid; milw0rm.com 2008-09-23...

WebPortal CMS &lt;= 0.7.4 (fckeditor) Arbitrary File Upload Vulnerability

No description provided by source. S.W.A.T. Title: WebPortal = 0.7.4 fckeditor Remote Arbitrary File Upload Vendor: http://webportal.ivanoculmine.com/download.php?mid=14 Discover by : S.W.A.T. [email protected] Impact: Medium Fix: Disable It In The Config File ; Site: wWw.SvvaT.IR - Exploit:...

WebPortal CMS &lt;= 0.7.4 (download.php aid) SQL Injection Exploit

No description provided by source. !/usr/bin/perl --==+============================================================================+==-- --==+ WebPortal = 0.7.4 Remote SQL Injection Exploit +==-- --==+============================================================================+==-- Discovered By:...

webportalcms-upload.txt

S.W.A.T. Title: WebPortal = 0.7.4 fckeditor Remote Arbitrary File Upload Vendor: http://webportal.ivanoculmine.com/download.php?mid=14 Discover by : S.W.A.T. [email protected] Impact: Medium Fix: Disable It In The Config File ; Site: wWw.SvvaT.IR - Exploit:...

WebPortal CMS 0.7.4 - 'download.php' SQL Injection

!/usr/bin/perl --==+============================================================================+==-- --==+ WebPortal = 0.7.4 Remote SQL Injection Exploit +==-- --==+============================================================================+==-- Discovered By: StAkeR [email protected] +...

WebPortal CMS <= 0.7.4 (fckeditor) Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ====================================================================== WebPortal CMS = 0.7.4 fckeditor Arbitrary File Upload Vulnerability ====================================================================== - Exploit:...