Vulnerabilities

TI-2021-14787 CVE-2021-36532 · GHSA-jhf4-hcxq-86v3

Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to…

LOW 39

Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00789 Published 2023-02-03 No fix listed CWE-362

TI-2020-13841 CVE-2020-20402 · GHSA-xw47-6hp2-vx5f

Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and…

HIGH 72

Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and access sensitive information via session fixation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00749 Published 2023-01-31 No fix listed CWE-287

TI-2018-11296 CVE-2018-15849 · GHSA-g45f-8hj8-58j6

An issue was discovered in portfolioCMS 1.0.5.

LOW 20

An issue was discovered in portfolioCMS 1.0.5.

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.00357 Published 2018-08-25 No fix listed CWE-352

TI-2018-11295 CVE-2018-15848 · GHSA-pr6f-7vm7-f822

An issue was discovered in portfolioCMS 1.0.5.

LOW 39

An issue was discovered in portfolioCMS 1.0.5.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00473 Published 2018-08-25 No fix listed CWE-352

TI-2018-08798 CVE-2018-12263 · GHSA-9x93-mvpg-7276

portfolioCMS 1.0.5 allows upload of arbitrary .php files via the admin/portfolio.php?newpage=true URI.

MEDIUM 40

portfolioCMS 1.0.5 allows upload of arbitrary .php files via the admin/portfolio.php?newpage=true URI.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01067 Published 2018-06-13 No fix listed CWE-434

TI-2018-08686 CVE-2018-12110 · GHSA-wh9j-2335-4m4x

portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter.

LOW 34

portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01042 Published 2018-06-11 No fix listed CWE-89

Vulnerabilities

Filters

Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to…

Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and…

An issue was discovered in portfolioCMS 1.0.5.

An issue was discovered in portfolioCMS 1.0.5.

portfolioCMS 1.0.5 allows upload of arbitrary .php files via the admin/portfolio.php?newpage=true URI.

portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter.