CVE-2013-5320

The CVE-2013-5320 entry describes a Cross‑site Scripting (XSS) flaw in mojoPortal (Forums/EditPost.aspx) before version 2.3.9.8. The vulnerability arises from accepting user input in the txtSubject parameter, enabling remote attackers to inject arbitrary script/HTML. Impact is typical client-side...

PT-2013-5480

Name of the Vulnerable Software and Affected Versions mojoPortal versions prior to 2.3.9.8 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the txtSubject parameter in the...

CVE-2013-5320: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Forums/EditPost.aspx in mojoPortal before 2.3.9.8 allows remote attackers to inject arbitrary web script or HTML via the txtSubject parameter...

MojoPortal 2.3.9.7 Cross Site Scripting

Class Stored Cross-Site Scripting Remote Yes Credit Michael Savage of Dionach [email protected] Vulnerable MojoPortal 2.3.9.7 MojoPortal is prone to a stored cross-site scripting vulnerability because it does not escape the titles of forum threads when inserting into the page title element. An...

CVE-2010-3603

Cross-site request forgery CSRF vulnerability in the file manager service Services/FileService.ashx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to hijack the authentication of administrators for requests that rename arbitrary files, as demonstrated by causing the user.config file to...

CVE-2010-3602

Cross-site scripting XSS vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to inject arbitrary web script or HTML via the User ID parameter. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to inject arbitrary web script or HTML via the User ID parameter. NOTE: some of these details are obtained from third party information...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the file manager service Services/FileService.ashx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to hijack the authentication of administrators for requests that rename arbitrary files, as demonstrated by causing the user.config file to...

CVE-2010-3603

Cross-site request forgery CSRF vulnerability in the file manager service Services/FileService.ashx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to hijack the authentication of administrators for requests that rename arbitrary files, as demonstrated by causing the user.config file to...

CVE-2010-3602

The vulnerability is an XSS in mojoPortal’s ProfileView.aspx affecting versions 2.3.4.3 and 2.3.5.1, exploitable via the User ID parameter to inject arbitrary script/HTML. The root cause is untrusted input handling in the ProfileView.aspx workflow. Exploit details, exploitability specifics, and a...

CVE-2010-3603

CVE-2010-3603 is a CSRF vulnerability in mojoPortal 2.3.4.3 and 2.3.5.1, affecting the file manager (Services/FileService.ashx). The issue allows remote attackers to hijack administrator authentication to rename arbitrary files (e.g., moving user.config), causing service disruption (DoS) and pote...

CVE-2010-3602

Cross-site scripting XSS vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to inject arbitrary web script or HTML via the User ID parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-3603: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the file manager service Services/FileService.ashx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to hijack the authentication of administrators for requests that rename arbitrary files, as demonstrated by causing the user.config file to...

CVE-2010-3602: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to inject arbitrary web script or HTML via the User ID parameter. NOTE: some of these details are obtained from third party information...

mojoportal Multiple Remote Vulnerabilities

Exploit for asp platform in category web applications ========================================== mojoportal Multiple Remote Vulnerabilities ========================================== Title : mojoportal Multiple Remote Vulnerabilities Affected Version : mojoPortal 2-3-4-3 Discovery :...

Month Of Abysssec Undisclosed Bugs - mojoPortal

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : mojoportal Multiple Remote Vulnerabilities Affected Version : mojoPortal 2-3-4-3 Discovery : www.Abysssec.com Vendor :...

mojoportal - Multiple Vulnerabilities

mojoportal - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : mojoportal Multiple Remote Vulnerabilities Affected Version : mojoPortal 2-3-4-3 Discovery :...

mojoportal - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : mojoportal Multiple Remote Vulnerabilities Affected Version : mojoPortal 2-3-4-3 Discovery : www.Abysssec.com Vendor :...