CVE-2008-4614

PortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which allows remote attackers to create and delete forums, topics, and replies.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2008-10-20

Last modified

2024-08-07

Weaknesses

CWE-287

Affected products

• Portalapp (Portalapp)

References

• http://secunia.com/advisories/28337
• http://securityreason.com/securityalert/4439
• http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads
• http://www.securityfocus.com/bid/27170
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39457
• https://www.exploit-db.com/exploits/4848