Vulnerabilities

TI-2014-06824 CVE-2014-8304 · GHSA-565q-h4wr-4p6v

Cross-site scripting (XSS) vulnerability in In-Portal CMS 5.2.0 and earlier allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in In-Portal CMS 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the next_template parameter to admin/index.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00931 Published 2014-10-16 No fix listed CWE-79

TI-2009-04742 CVE-2009-4986 · GHSA-3xvr-5rgg-f99f

Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magic_quotes_gpc…

LOW 34

Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0204 Published 2010-08-25 No fix listed CWE-22

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in In-Portal CMS 5.2.0 and earlier allows remote…

Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magic_quotes_gpc…