Vulnerabilities

TI-2024-34073 CVE-2024-50660 · GHSA-rpgv-42mm-c94j

File Upload Bypass was found in AdPortal 3.0.39 allows a remote attacker to execute…

MEDIUM 51

File Upload Bypass was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the file upload functionality

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00889 Published 2025-01-07 No fix listed CWE-94

TI-2024-34072 CVE-2024-50659 · GHSA-jcv7-vfq5-hj4c

Cross Site Scripting vulnerability iPublish Media Solutions AdPortal 3.0.39 allows a…

LOW 27

Cross Site Scripting vulnerability iPublish Media Solutions AdPortal 3.0.39 allows a remote attacker to escalate privileges via the shippingAsBilling parameter in updateuserinfo.html.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00401 Published 2025-01-07 No fix listed CWE-79

TI-2024-34071 CVE-2024-50658 · GHSA-pj5p-wjjg-q3w5

Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote…

MEDIUM 50

Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00822 Published 2025-01-07 No fix listed CWE-94

Vulnerabilities

Filters

File Upload Bypass was found in AdPortal 3.0.39 allows a remote attacker to execute…

Cross Site Scripting vulnerability iPublish Media Solutions AdPortal 3.0.39 allows a…

Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote…