CVE-2008-4612

Portalapp - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter to (1) forums.asp and (2) content.asp.

Exploits (1)

exploitdb WORKING POC VERIFIED

by r3dm0v3 · textwebappsasp

https://www.exploit-db.com/exploits/4848

View Code ZIP pw:eip

References (9)

[Vendor Advisory] http://secunia.com/advisories/28337

[Patch] http://www.aspapp.com/content.asp?CatId=197&ContentType=Downloads

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/39455

[Vendor Advisory] http://www.htbridge.ch/advisory/xss_vulnerability_in_portalapp_1.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/512073/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/27170

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/4848

[Third Party Advisory] http://www.vupen.com/english/advisories/2010/1630

[Third Party Advisory] http://securityreason.com/securityalert/4439

Scores

EPSS 0.0677

EPSS Percentile 91.2%

Classification

CWE

CWE-79

Status published

Affected Products (2)

portalapp/portalapp

n/a/n/a

Timeline

Published Oct 20, 2008

Tracked Since Feb 18, 2026