CVE-2008-4612

PortalApp 4.0 - Cross-Site Scripting via Keywords Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-4612. PoCs published by r3dm0v3.

AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in PortalApp 4.0, including SQL injection, unauthenticated forum/topic creation/deletion, and XSS. The SQL injection allows dumping user credentials, while other actions enable unauthorized content manipulation.

Description

Cross-site scripting (XSS) vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter to (1) forums.asp and (2) content.asp.

Exploits (1)

exploitdb WORKING POC VERIFIED

by r3dm0v3 · textwebappsasp

https://www.exploit-db.com/exploits/4848

View Code ZIP pw:eip

This exploit demonstrates multiple vulnerabilities in PortalApp 4.0, including SQL injection, unauthenticated forum/topic creation/deletion, and XSS. The SQL injection allows dumping user credentials, while other actions enable unauthorized content manipulation.

Classification

Working Poc 95%

Attack Type

Sqli | Auth Bypass | Xss

Complexity

Trivial

Reliability

Reliable

Target: PortalApp 4.0

No auth needed

Prerequisites: Access to the target web application

MITRE ATT&CK