Vulnerabilities

TI-2013-04558 CVE-2013-5320 · GHSA-x9mh-g65h-7rhq

Cross-site scripting (XSS) vulnerability in Forums/EditPost.aspx in mojoPortal before…

LOW 24

Cross-site scripting (XSS) vulnerability in Forums/EditPost.aspx in mojoPortal before 2.3.9.8 allows remote attackers to inject arbitrary web script or HTML via the txtSubject parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02096 Published 2013-08-20 No fix listed CWE-79

TI-2010-03432 CVE-2010-3603 · GHSA-579f-rm77-fpx9

Cross-site request forgery (CSRF) vulnerability in the file manager service…

LOW 35

Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to hijack the authentication of administrators for request…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02457 Published 2010-09-24 No fix listed CWE-352

TI-2010-03431 CVE-2010-3602 · GHSA-9jcf-26mj-wqj2

Cross-site scripting (XSS) vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and…

LOW 27

Cross-site scripting (XSS) vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to inject arbitrary web script or HTML via the User ID parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03768 Published 2010-09-24 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in Forums/EditPost.aspx in mojoPortal before…

Cross-site request forgery (CSRF) vulnerability in the file manager service…

Cross-site scripting (XSS) vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and…