Vulnerabilities > Portalapp > Portalapp > 4.0
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2008-10-20 | CVE-2008-4615 | Remote Security vulnerability in Portalapp 4.0 Unspecified vulnerability in i_utils.asp in PortalApp before 4.01a has unknown impact and attack vectors. | 10.0 |
2008-10-20 | CVE-2008-4614 | Improper Authentication vulnerability in Portalapp 4.0 PortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which allows remote attackers to create and delete forums, topics, and replies. | 7.5 |
2008-10-20 | CVE-2008-4613 | SQL Injection vulnerability in Portalapp 4.0 SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands via the sortby parameter. | 7.5 |
2008-10-20 | CVE-2008-4612 | Cross-Site Scripting vulnerability in Portalapp 4.0 Cross-site scripting (XSS) vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter to (1) forums.asp and (2) content.asp. | 4.3 |