CVE-2017-18006

netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447...

CVE-2017-18006: Improper Neutralization of Input During Web Page Generation

netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447...

PT-2018-6604

Name of the Vulnerable Software and Affected Versions: Extensis Portfolio NetPublish affected versions not specified Description: The issue concerns an XSS vulnerability in the quickfind parameter of the netpub/server.np component. Recommendations: At the moment, there is no information about a...

Extensis Portfolio Netpublish Server 7.0 Server.NP Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15974/info Portfolio Netpublish Server is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to...

IRM 012: Portfolio Netpublish Server 7 is vulnerable to a Directory Traversal Attack

---------------------------------------------------------------------- IRM Security Advisory No. 012 Portfolio Netpublish Server 7 is vulnerable to a Directory Traversal Attack Vulnerablity Type / Importance: Information Leakage / High Problem discovered: October 11th 2005 Vendor contacted: Octob...

Extensis Portfolio Netpublish Server 7.0 - Server.NP Directory Traversal

Extensis Portfolio Netpublish Server 7.0 - Server.NP Directory Traversal source: https://www.securityfocus.com/bid/15974/info Portfolio Netpublish Server is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

Extensis Portfolio Netpublish Server 7.0 - Server.NP Directory Traversal

source: https://www.securityfocus.com/bid/15974/info Portfolio Netpublish Server is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve arbitrary files in the conte...