CVE-2008-4614

EPSS 3.3%

PortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which allows remote attackers to create and delete forums, topics, and replies.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4848unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/28337 http://securityreason.com/securityalert/4439 https://exchange.xforce.ibmcloud.com/vulnerabilities/39457 https://www.exploit-db.com/exploits/4848 http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads http://www.securityfocus.com/bid/27170