CVE-2008-4612

概要

参考情報

• secunia.com/advisories/28337 · Vendor Advisory
• securityreason.com/securityalert/4439
• aspapp.com/content.asp · Patch
• htbridge.ch/advisory/xss_vulnerability_in_portalapp_1.html
• securityfocus.com/archive/1/512073/100/0/threaded
• securityfocus.com/bid/27170
• vupen.com/english/advisories/2010/1630
• exchange.xforce.ibmcloud.com/vulnerabilities/39455
• exploit-db.com/exploits/4848

portalapp のその他の脆弱性

• CVE-2008-4615緊急 10.0Unspecified vulnerability in i_utils.asp in PortalApp before 4.01a has unknown impact and attack vectors.
• CVE-2008-4614高 7.5PortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which allows remote attackers to create and delete for…
• CVE-2008-4613高 7.5SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands via the sortby paramete…
• CVE-2007-3252高 7.8PortalApp stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a data…