CVE-2008-4613

PortalApp 4.0 - SQL Injection via forums.asp sortby Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-4613. PoCs published by r3dm0v3.

AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in PortalApp 4.0, including SQL injection, unauthenticated forum/topic creation/deletion, and XSS. The SQL injection allows dumping user credentials, while other actions enable unauthorized content manipulation.

Description

SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands via the sortby parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by r3dm0v3 · textwebappsasp
https://www.exploit-db.com/exploits/4848

This exploit demonstrates multiple vulnerabilities in PortalApp 4.0, including SQL injection, unauthenticated forum/topic creation/deletion, and XSS. The SQL injection allows dumping user credentials, while other actions enable unauthorized content manipulation.

Classification
Working Poc 95%
Attack Type
Sqli | Auth Bypass | Xss
Complexity
Trivial
Reliability
Reliable
Target: PortalApp 4.0
No auth needed
Prerequisites: Access to the target web application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/4848
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/27170
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/39454
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/4439
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28337

Scores

EPSS 0.0235
EPSS Percentile 81.6%

Details

CWE
CWE-89
Status published
Products (1)
portalapp/portalapp 4.0
Published Oct 20, 2008
Tracked Since Feb 18, 2026