Vulnerabilities

TI-2008-04972 CVE-2008-5221 · GHSA-h8mw-3q4j-45hm

The account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not…

LOW 38

The account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge of the original password, which allows remote attackers to change the admin accou…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02547 Published 2008-11-25 No fix listed CWE-287

TI-2008-04971 CVE-2008-5220 · GHSA-qrrw-cm2j-xv79

Unrestricted file upload vulnerability in admin/upload_form.php in wPortfolio 0.3 and…

MEDIUM 58

Unrestricted file upload vulnerability in admin/upload_form.php in wPortfolio 0.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a di…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.1429 Published 2008-11-25 No fix listed CWE-20

Vulnerabilities

Filters

The account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not…

Unrestricted file upload vulnerability in admin/upload_form.php in wPortfolio 0.3 and…