Searching portalapp software vulnerabilities

PortalApp places user credentials under the web

insufficient | credentials | information | sensitive | PortalApp | attackers | control | 8275mdb | request | remote | allows | direct | places | access | which | under | user | gain | root | via | web |

PortalApp places user credentials under the web root with insufficient access control, which allows remote attackers to gain access to sensitive information via a direct request to 8275.mdb.


SQL injection vulnerability in ad_click.asp for

vulnerability | ad_clickasp | banner_id | attackers | arbitrary | injection | parameter | PortalApp | commands | execute | allows | remote | SQL | via |

SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via the banner_id parameter.


Multiple cross-site scripting (XSS) vulnerabili

cross-site | scripting | Multiple |

Multiple cross-site scripting (XSS) vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the (1) contenttype or (2) keywords parameter.


Cross-site scripting (XSS) vulnerability in log

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the ret_page parameter.


PortalApp stores sensitive information under th

CVE-2004-1786 | insufficient | information | different | attackers | PortalApp | sensitive | database | download | control | 8691mdb | request | vector | direct | access | stores | allows | remote | under | which | than | root | via | web |

PortalApp stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 8691.mdb, a different vector than CVE-2004-1786.


Software vulnerabilities results 1 to 6 of 6     
Page: 1