Portix-PHP 2-0.3.2 Portal - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/18227/info Portix-PHP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in...

Portix-PHP 0.4 - view.php Directory Traversal

Portix-PHP 0.4 - view.php Directory Traversal source: https://www.securityfocus.com/bid/4039/info Portix-PHP is freely available web portal software. It is written in PHP and will run on most Unix and Linux variants. Portix-PHP is prone to directory traversal attacks. The script view.php does not...

Portix-PHP 0.4 - index.php Directory Traversal

Portix-PHP 0.4 - index.php Directory Traversal source: https://www.securityfocus.com/bid/4038/info Portix-PHP is freely available web portal software. It is written in PHP and will run on most Unix and Linux variants. Portix-PHP is prone to directory traversal attacks. The script index.php does n...

Portix-PHP 0.4 - 'index.php' Directory Traversal

source: https://www.securityfocus.com/bid/4038/info Portix-PHP is freely available web portal software. It is written in PHP and will run on most Unix and Linux variants. Portix-PHP is prone to directory traversal attacks. The script index.php does not sufficiently filter '../' sequences from web...

Portix-PHP 0.4 - Cookie Manipulation

source: https://www.securityfocus.com/bid/4041/info Portix-PHP is freely available web portal software. It is written in PHP and will run on most Unix and Linux variants. Portix-PHP uses non-expiring cookies for session management. It is possible for a malicious user to manipulate values in their...

Portix-PHP 0.4 - Cookie Manipulation

Portix-PHP 0.4 - Cookie Manipulation source: https://www.securityfocus.com/bid/4041/info Portix-PHP is freely available web portal software. It is written in PHP and will run on most Unix and Linux variants. Portix-PHP uses non-expiring cookies for session management. It is possible for a malicio...

Portix-PHP 0.4 - 'view.php' Directory Traversal

source: https://www.securityfocus.com/bid/4039/info Portix-PHP is freely available web portal software. It is written in PHP and will run on most Unix and Linux variants. Portix-PHP is prone to directory traversal attacks. The script view.php does not sufficiently filter '../' sequences from web...

Big Security Holes in Portix-PHP Portal

On all version. The last one is 0.4.02 . To view files in the hard disk : www.hostportix.com/index.php?l=../../../etc/passwd www.hostportix.com/index.php? l=forum/view.php&topic=../../../etc/passwd To be administrator : Send the cookie name=access value=ok to /config/config.php . Portix team has...