PT-2008-5829 · Portalapp · Portalapp

R3Dm0V3 · Published 2008-10-20 · Updated 2017-09-29 · CVE-2008-4614

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PortalApp version 4.0

Description The issue allows remote attackers to create and delete forums, topics, and replies due to a lack of authentication requirement for certain API endpoints, specifically "forums.asp" and "content.asp".

Recommendations For PortalApp version 4.0, consider implementing proper authentication mechanisms for the "forums.asp" and "content.asp" endpoints to restrict unauthorized access until a patch is available. As a temporary workaround, restrict access to these endpoints to minimize the risk of exploitation.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-4614

Affected Products

Portalapp

References · 7

• 🔥 https://exploit-db.com/exploits/4848 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4614 · Security Note
• http://aspapp.com/content.asp?CatId=197&ContentType=Downloads · Patch
• http://secunia.com/advisories/28337 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39457 · Note
• http://securityreason.com/securityalert/4439 · Note
• http://securityfocus.com/bid/27170 · Note