WebPortal CMS 0.7.4 - FCKeditor Arbitrary File Upload

WebPortal CMS 0.7.4 - FCKeditor Arbitrary File Upload S.W.A.T. Title: WebPortal = 0.7.4 fckeditor Remote Arbitrary File Upload Vendor: http://webportal.ivanoculmine.com/download.php?mid=14 Discover by : S.W.A.T. [email protected] Impact: Medium Fix: Disable It In The Config File ; Site:...

webportalcms074-sql.txt

!/usr/bin/perl --==+============================================================================+==-- --==+ WebPortal = 0.7.4 Remote SQL Injection Exploit +==-- --==+============================================================================+==-- Discovered By: StAkeR [email protected] +...

WebPortal CMS 0.7.4 - download.php SQL Injection

WebPortal CMS 0.7.4 - download.php SQL Injection !/usr/bin/perl --==+============================================================================+==-- --==+ WebPortal = 0.7.4 Remote SQL Injection Exploit +==-- --==+============================================================================+==--...

WebPortal CMS <= 0.7.4 (download.php aid) SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================================== WebPortal CMS = 0.7.4 download.php aid SQL Injection Exploit =============================================================== !/usr/bin/perl...

WebPortal CMS 0.7.4 - 'FCKeditor' Arbitrary File Upload

S.W.A.T. Title: WebPortal = 0.7.4 fckeditor Remote Arbitrary File Upload Vendor: http://webportal.ivanoculmine.com/download.php?mid=14 Discover by : S.W.A.T. [email protected] Impact: Medium Fix: Disable It In The Config File ; Site: wWw.SvvaT.IR - Exploit:...

CVE-2008-0141

actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it easier for remote attackers to obtain access to any account via a lostpass action...

Sql injection

Multiple SQL injection vulnerabilities in WebPortal CMS 0.6-beta allow remote attackers to execute arbitrary SQL commands via the username parameter to actions.php, and unspecified other vectors...

Deserialization of untrusted data

actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it easier for remote attackers to obtain access to any account via a lostpass action...

CVE-2008-0142

Multiple SQL injection vulnerabilities in WebPortal CMS 0.6-beta allow remote attackers to execute arbitrary SQL commands via the username parameter to actions.php, and unspecified other vectors...

CVE-2008-0142

Multiple SQL injection vulnerabilities in WebPortal CMS 0.6-beta allow remote attackers to execute arbitrary SQL commands via the username parameter to actions.php, and unspecified other vectors...

CVE-2008-0142

CVE-2008-0142 affects WebPortal CMS 0.6-beta, with multiple SQL injection vulnerabilities. The issue allows remote attackers to execute arbitrary SQL commands via the user_name parameter to actions.php and other vectors. Root cause: input unsafely concatenated into SQL queries. Impact: arbitrary ...

CVE-2008-0141

Summary: CVE-2008-0141 affects WebPortal CMS 0.6-beta where actions.php generates passwords that include only the time of day, enabling remote attackers to gain access via the lostpass action. The vulnerability is rated HIGH (CVSS v3.1 base score 7.5) with network access, low attack complexity, a...

CVE-2008-0141

actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it easier for remote attackers to obtain access to any account via a lostpass action...

PT-2008-1794 · Webportal · Webportal Cms

Name of the Vulnerable Software and Affected Versions: WebPortal CMS version 0.6-beta Description: The issue allows remote attackers to obtain access to any account via a lostpass action because the actions.php file in WebPortal CMS generates predictable passwords containing only the time of day...

WebPortal CMS 0.6-beta Remote Password Change Exploit

No description provided by source. !/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ ...

webportalcms-passwd.txt

!/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public Exploit. Date:...

CVE-2007-6664

SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter...

Sql injection

SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter...

CVE-2007-6664

SQL injection vulnerability in index.php in WebPortal CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter...

CVE-2007-6664

CVE-2007-6664 is a SQL injection vulnerability in WebPortal CMS 0.6.0 and earlier. The flaw resides in the index.php handling of the m parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD notes a base score of 7.5 (High) with network access, low attack complexity, and n...