CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2008-4614

HIGH
7.5
CVSS Severity Score
EPSS Score0.0070%
EPSS Percentile4.54th
Published2008年10月20日
Last Modified2026年4月23日

Vulnerability Description

PortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which allows remote attackers to create and delete forums, topics, and replies.

Affected Platforms (CPE)

📦
Portalapp

Portalapp

= 4.0

References & Advisories

🔗 http://secunia.com/advisories/28337
🔗 http://securityreason.com/securityalert/4439
🔗 http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads
🔗 http://www.securityfocus.com/bid/27170
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/39457
🔗 https://www.exploit-db.com/exploits/4848
🔗 http://secunia.com/advisories/28337
🔗 http://securityreason.com/securityalert/4439

相關漏洞威脅

CVE-2008-461510.0

Unspecified vulnerability in i_utils.asp in PortalApp before 4.01a has unknown impact and attack vectors.

CVE-2002-165910.0

user_profile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the user_id variable.

CVE-2007-32527.8

PortalApp stores sensitive information under the web root with insufficient access control, which allows remote attackers to downl...

CVE-2005-09487.5

SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via the banner...