Vulnerabilities > Miniportail > Miniportail
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2009-02-19 | CVE-2008-6168 | Cross-Site Scripting vulnerability in Miniportail Cross-site scripting (XSS) vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified argument, probably the search string. | 4.3 |
2009-02-19 | CVE-2008-6167 | Path Traversal vulnerability in Miniportail Directory traversal vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. | 7.5 |