CVE-2008-4614

PortalApp 4.0 - Unauthenticated Forum and Content Management via forums.asp and content.asp

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-4614. PoCs published by r3dm0v3.

AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in PortalApp 4.0, including SQL injection, unauthenticated forum/topic creation/deletion, and XSS. The SQL injection allows dumping user credentials, while other actions enable unauthorized content manipulation.

Description

PortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which allows remote attackers to create and delete forums, topics, and replies.

Exploits (1)

exploitdb WORKING POC VERIFIED

by r3dm0v3 · textwebappsasp

https://www.exploit-db.com/exploits/4848

View Code ZIP pw:eip

This exploit demonstrates multiple vulnerabilities in PortalApp 4.0, including SQL injection, unauthenticated forum/topic creation/deletion, and XSS. The SQL injection allows dumping user credentials, while other actions enable unauthorized content manipulation.

Classification

Working Poc 95%

Attack Type

Sqli | Auth Bypass | Xss

Complexity

Trivial

Reliability

Reliable

Target: PortalApp 4.0

No auth needed

Prerequisites: Access to the target web application

MITRE ATT&CK