Shadowed Portal

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Shadowed Portal records in CISA KEV

No Shadowed Portal vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Shadowed Portal 3 records MEDIUM

Records

3 records

TI-2006-04656 CVE-2006-4826 · GHSA-4848-2c65-8677

PHP remote file inclusion vulnerability in bottom.php in Shadowed Portal 5.599 and…

MEDIUM 45

PHP remote file inclusion vulnerability in bottom.php in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09712 Published 2006-09-15 No fix listed

TI-2006-04712 CVE-2006-4885 · GHSA-4wrq-hgcp-rfc5

PHP remote file inclusion vulnerability in Shadowed Portal 5.599 and earlier allows…

MEDIUM 43

PHP remote file inclusion vulnerability in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter in (1) footer.php and (2) header.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07085 Published 2006-09-19 No fix listed

TI-2006-01647 CVE-2006-1701 · GHSA-5jm5-7748-8vmm

Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows…

LOW 17

Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbitrary web script or HTML via the page parameter to load.php.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02042 Published 2006-04-11 No fix listed

Open these records in search →

Critical	0
High	2
Medium	0
Low	1
No CVSS	0