Vulnerabilities

TI-2006-04712 CVE-2006-4885 · GHSA-4wrq-hgcp-rfc5

PHP remote file inclusion vulnerability in Shadowed Portal 5.599 and earlier allows…

MEDIUM 43

PHP remote file inclusion vulnerability in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter in (1) footer.php and (2) header.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07085 Published 2006-09-19 No fix listed

TI-2006-04656 CVE-2006-4826 · GHSA-4848-2c65-8677

PHP remote file inclusion vulnerability in bottom.php in Shadowed Portal 5.599 and…

MEDIUM 45

PHP remote file inclusion vulnerability in bottom.php in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09712 Published 2006-09-15 No fix listed

TI-2006-01647 CVE-2006-1701 · GHSA-5jm5-7748-8vmm

Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows…

LOW 17

Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbitrary web script or HTML via the page parameter to load.php.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02042 Published 2006-04-11 No fix listed

Vulnerabilities

Filters

PHP remote file inclusion vulnerability in Shadowed Portal 5.599 and earlier allows…

PHP remote file inclusion vulnerability in bottom.php in Shadowed Portal 5.599 and…

Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows…