Mkportal@1.1 rc1 Security Vulnerabilities and Issues — Mkportal@1.1 rc1 CVE List

Lucene search

MkportalMkportal1.1 rc1

4 matches found

CVE•added 2007/01/12 5:4 a.m.•43 views

CVE-2007-0194

admin.php in MKPortal M1.1 RC1 allows remote attackers to obtain sensitive information via a direct request with an MK_PATH=1 query string, which reveals the path in an error message.

7.8CVSS6.1AI score0.00405EPSS

CVE•added 2007/12/20 12:46 a.m.•41 views

CVE-2007-6467

SQL injection vulnerability in index.php in MKPortal 1.1 RC1 allows remote attackers to execute arbitrary SQL commands via the ida parameter in a gallery foto_show action.

7.5CVSS8.3AI score0.00308EPSS

CVE•added 2006/09/09 12:4 a.m.•32 views

CVE-2006-4665

Cross-site scripting (XSS) vulnerability in index.php in MKPortal M1.1 Rc1 allows remote attackers to inject arbitrary web script or HTML via the ind parameter, possibly related to the PHP_SELF variable. NOTE: Some details are obtained from third party information.

4.3CVSS6.1AI score0.00411EPSS

CVE•added 2006/04/27 1:34 p.m.•30 views

CVE-2006-2066

Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) u1, (2) m1, (3) m2, (4) m3, (5) m4 parameters.

4.3CVSS5.8AI score0.09706EPSS