25 matches found
AldWeb MiniPortail 1.92.x - LNG Cross-Site Scripting
AldWeb MiniPortail 1.92.x - LNG Cross-Site Scripting source: https://www.securityfocus.com/bid/8504/info cross-site scripting vulnerability has been reported for miniPortail. The vulnerability exists due to insufficient sanitization of some user-supplied values. Specifically, malicious HTML code ...
CVE-2003-0272
admin.php in miniPortail allows remote attackers to gain administrative privileges by setting the miniPortailAdmin cookie to an "adminok" value...
miniPortail (PHP) : Admin Access
Informations : °°°°°°°°°°°°°° Language : PHP Website : http://www.aldweb.com/ Version : 1.9, 2.0, 2.1, 2.2 and less ? Problem : Admin Access PHP Code/Location : °°°°°°°°°°°°°°°°°°° admin/admin.php :...
CVE-2003-0272
The CVE-2003-0272 issue affects miniPortail’s admin.php where an attacker can bypass authentication by setting the miniPortailAdmin cookie to the value “adminok”, gaining administrative privileges. Documented impact is remote privilege escalation through a cookie-based authentication bypass in a ...
PT-2003-1480 · Unknown · Miniportail
Name of the Vulnerable Software and Affected Versions: miniPortail affected versions not specified Description: The issue allows remote attackers to gain administrative privileges. This is achieved by setting the miniPortailAdmin cookie to an "adminok" value in the admin.php file. Recommendations...