EDB-4835
functionalWebPortal CMS 0.6-beta - Remote Password Change
view exploit source exploit_dbverifiedtype webappsauthor The:Paradoxpublished 2008-01-04catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2008-0141US | high7.5OT elevated | Exploit | ||
actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it easier for remote attackers to obtain access to any account vi… | ||||
| CVE-2008-0142US | medium6.8 | Exploit | ||
Multiple SQL injection vulnerabilities in WebPortal CMS 0.6-beta allow remote attackers to execute arbitrary SQL commands via the user_name parameter to actions.php, and unspecifie… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan