CyberSec.Space Logo
CVEブラウザに戻る

CVE-2008-4614

HIGH
7.5
CVSS Severity Score
EPSS Score0.0070%
EPSS Percentile4.54th
Published2008年10月20日
Last Modified2026年4月23日

Vulnerability Description

PortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which allows remote attackers to create and delete forums, topics, and replies.

Affected Platforms (CPE)

📦
Portalapp

Portalapp

= 4.0

References & Advisories

🔗 http://secunia.com/advisories/28337
🔗 http://securityreason.com/securityalert/4439
🔗 http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads
🔗 http://www.securityfocus.com/bid/27170
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/39457
🔗 https://www.exploit-db.com/exploits/4848
🔗 http://secunia.com/advisories/28337
🔗 http://securityreason.com/securityalert/4439

関連する脆弱性情報

CVE-2008-461510.0

Unspecified vulnerability in i_utils.asp in PortalApp before 4.01a has unknown impact and attack vectors.

CVE-2002-165910.0

user_profile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the user_id variable.

CVE-2007-32527.8

PortalApp stores sensitive information under the web root with insufficient access control, which allows remote attackers to downl...

CVE-2005-09487.5

SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via the banner...