EUVD-2008-4593

Malware in sbrugna...

EUVD-2008-4594

Malware in sbrugna...

Iatek PortalApp 4.0 - 'links.asp' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28315/info PortalApp is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

CVE-2008-4612

Cross-site scripting XSS vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter to 1 forums.asp and 2 content.asp...

CVE-2008-4614

PortalApp 4.0 does not require authentication for 1 forums.asp and 2 content.asp, which allows remote attackers to create and delete forums, topics, and replies...

CVE-2008-4613

SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands via the sortby parameter...

Authentication flaw

PortalApp 4.0 does not require authentication for 1 forums.asp and 2 content.asp, which allows remote attackers to create and delete forums, topics, and replies...

Sql injection

SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands via the sortby parameter...

CVE-2008-4612

Cross-site scripting XSS vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter to 1 forums.asp and 2 content.asp...

CVE-2008-4612

PortalApp 4.0 is affected by an XSS flaw triggered through the keywords parameter in content.asp (and also in forums.asp). The root cause is an input sanitization error that allows remote attackers to inject arbitrary HTML/JS into a victim’s browser. This is evidenced by multiple sources (HTBridg...

CVE-2008-4614

CVE-2008-4614 affects PortalApp 4.0. The issue is an authentication flaw in two pages, forums.asp and content.asp, that allows remote attackers to create and delete forums, topics, and replies. Root cause: missing access controls on these pages enabling unauthorized actions. The vulnerability is ...

CVE-2008-4614

PortalApp 4.0 does not require authentication for 1 forums.asp and 2 content.asp, which allows remote attackers to create and delete forums, topics, and replies...

CVE-2008-4613

CVE-2008-4613 concerns PortalApp 4.0 where the forums.asp script’s sortby parameter is vulnerable to SQL injection. The root cause is inadequate input sanitization, allowing an unauthenticated attacker to influence database queries via the sortby value. Impact per the sources is the ability to ex...

PortalApp 4.0 - SQL Injection / Cross-Site Scripting / Authentication Bypass

Title: PortalApp 4.0 Multiple vulnerabilities Discovered By: r3dm0v3 http://r3dm0v3.persianblog.ir r3dm0v3 4t yahoodotcom Tehran - Iran Vendor: http://www.portalapp.com Vulnerable Version: 4.0, prior versions maybe vulnerable Remote Exploit: Yes Dork: "Copyright @2007 Iatek LLC" Fix: Not Availabl...

PortalApp 4.0 (SQL/XSS/Auth Bypasses) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== PortalApp 4.0 SQL/XSS/Auth Bypasses Multiple Remote Vulnerabilities ===================================================================== Title: PortalApp 4.0 Multiple...