Vulnerabilities

TI-2026-25437 CVE-2026-32989 · GHSA-48jf-r2hq-f5gw

Precurio Intranet Portal 4.4: Cross-Site Request Forgery leading to arbitrary file upload

HIGH 72

Precurio Intranet Portal 4.4 contains a cross-site request forgery vulnerability that allows attackers to induce authenticated users to submit crafted requests to a profile update endpoint handling file uploads.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00223 Published 2026-03-20 No fix listed CWE-352

TI-2018-15393 CVE-2018-25168 · GHSA-r2h3-j8v9-wx8v

Precurio Intranet Portal 2.0 Cross-Site Request Forgery Add Admin

MEDIUM 57

Precurio Intranet Portal 2.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by submitting crafted POST requests.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00259 Published 2026-03-06 No fix listed CWE-434

TI-2016-08797 CVE-2016-10759 · GHSA-pj6v-2vhx-c87w

The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary…

MEDIUM 48

The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to rename the .htacces…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03652 Published 2019-05-24 No fix listed CWE-22

Vulnerabilities

Filters

Precurio Intranet Portal 4.4: Cross-Site Request Forgery leading to arbitrary file upload

Precurio Intranet Portal 2.0 Cross-Site Request Forgery Add Admin

The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary…