167 matches found
PT-2023-29064 · Unknown · Mojoportal
Name of the Vulnerable Software and Affected Versions: mojoPortal version 2.7.0.0 Description: The issue allows a remote attacker to execute arbitrary code via the Skin Management function. This is a result of a File Upload vulnerability. Recommendations: For mojoPortal version 2.7.0.0, consider...
mojoPortal 代码问题漏洞
mojoPortal is a cross-platform object-oriented web framework . A file upload vulnerability exists in mojoPortal, which can be exploited by a remote attacker to submit a special request that can upload malicious files and execute arbitrary code in the context of the application...
CVE-2023-44012
Cross Site Scripting vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the helpkey parameter in the Help.aspx component...
mojoPortal Cross-Site Scripting Vulnerability
mojoPortal is the United States Joe Audette individual developer of a set of open source , object-oriented Web site architecture WSF and content management system CMS. The system provides event calendars, photo albums, file managers and more. A cross-site scripting vulnerability exists in...
CVE-2023-44012
Cross Site Scripting vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the helpkey parameter in the Help.aspx component...
CVE-2023-44012
Cross Site Scripting vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the helpkey parameter in the Help.aspx component...
PT-2023-29063 · Unknown · Mojoportal
Name of the Vulnerable Software and Affected Versions: mojoPortal version 2.7.0.0 Description: The issue allows a remote attacker to execute arbitrary code via the File Manager function. This is a result of a File Upload vulnerability. Recommendations: For mojoPortal version 2.7.0.0, consider...
PT-2023-29066 · Unknown · Mojoportal
Name of the Vulnerable Software and Affected Versions: mojoPortal version 2.7.0.0 Description: An issue in mojoPortal allows a remote attacker to execute arbitrary code via a crafted script to the layout.master skin file at the Skin management component. Recommendations: For mojoPortal version...
CVE-2023-44009
File Upload vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the Skin Management function...
CVE-2023-44012
mojoPortal 2.7.0.0 is affected by a Cross-Site Scripting (CVE-2023-44012) via the helpkey parameter in the Help.aspx component. The vulnerability allows a remote attacker to run arbitrary scripts in the victim’s browser and may have partial impact on integrity/confidentiality as described in sour...
CVE-2023-44008
File Upload vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the File Manager function...
CVE-2023-44008
File Upload vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the File Manager function...
CVE-2023-44011
An issue in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the layout.master skin file at the Skin management component...
CVE-2023-44011
Summary: CVE-2023-44011 affects mojoPortal v2.7.0.0. The vulnerability lies in the Skin management component, where a crafted script to the layout.master skin file enables remote arbitrary code execution. The condition is a remote attacker with no privileges required and no user interaction, yiel...
mojoPortal 代码问题漏洞
mojoPortal is a cross-platform object-oriented web framework . A file upload vulnerability exists in mojoPortal, which can be exploited by a remote attacker to submit a special request that can upload malicious files and execute arbitrary code in the context of the application...
CVE-2023-44008
Summary (CVE-2023-44008): A file upload vulnerability in mojoPortal v2.7.0.0 allows remote code execution through the File Manager function. This is a vulnerability in the MojoPortal file upload handling that enables an attacker to upload and execute arbitrary code in the context of the applicati...
CVE-2023-44008
File Upload vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the File Manager function...
CVE-2023-44009
mojoPortal 2.7.0.0 is affected by a file upload vulnerability in the Skin Management function that enables remote code execution. The sources describe a File Upload vulnerability allowing arbitrary code execution in the application context, but do not provide technical steps, affected subcomponen...