high7.5Public exploit code
CVE-2008-4614
PortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which allows remote attackers to create and delete forums, topics, and re…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PortalApp 4.0 - SQL Injection / Cross-Site Scripting / Authentication Bypass2008-01-06 · webapps · asp · Verified
Impact
PortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which allows remote attackers to create and delete forums, topics, and replies.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Portalapp | Portalapp | Version 4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/28337
- http://securityreason.com/securityalert/4439
- http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads
- http://www.securityfocus.com/bid/27170
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39457
- https://www.exploit-db.com/exploits/4848
- http://secunia.com/advisories/28337
- http://securityreason.com/securityalert/4439
- http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads
- http://www.securityfocus.com/bid/27170
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39457
- https://www.exploit-db.com/exploits/4848