Cross-site scripting (XSS) vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to inject arbitrary web script or HTML via the User ID parameter. NOTE: some of these details are obtained from third party information.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-79,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| sourcetreesolutions | mojoportal | 2.3.5.1 |
| sourcetreesolutions | mojoportal | 2.3.4.3 |
Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to hijack the authentication of administrators for requests that rename arbitrary files, as demonstrated by causing the user.config file to be moved, leading to a denial of service (service stop) and possibly the exposure of sensitive information.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-352,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| sourcetreesolutions | mojoportal | 2.3.5.1 |
| sourcetreesolutions | mojoportal | 2.3.4.3 |
Cross-site scripting (XSS) vulnerability in Forums/EditPost.aspx in mojoPortal before 2.3.9.8 allows remote attackers to inject arbitrary web script or HTML via the txtSubject parameter.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-79,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| sourcetreesolutions | mojoportal | 2.3.3.2 |
| sourcetreesolutions | mojoportal | 2.3.3.6 |
| sourcetreesolutions | mojoportal | 2.3.3.9 |
| sourcetreesolutions | mojoportal | 2.3.5.5 |
| sourcetreesolutions | mojoportal | 2.3.6.1 |
| sourcetreesolutions | mojoportal | 2.3.1.0 |
| sourcetreesolutions | mojoportal | 2.3.6.6 |
| sourcetreesolutions | mojoportal | 2.3.1.7 |
| sourcetreesolutions | mojoportal | 2.3.9.4 |
| sourcetreesolutions | mojoportal | 2.3.5.4 |
| sourcetreesolutions | mojoportal | 2.3.6.7 |
| sourcetreesolutions | mojoportal | 2.3.9.6 |
| sourcetreesolutions | mojoportal | 2.3.0.4 |
| sourcetreesolutions | mojoportal | 2.3.2.9 |
| sourcetreesolutions | mojoportal | 2.3.4.1 |
| sourcetreesolutions | mojoportal | 2.3.6.2 |
| sourcetreesolutions | mojoportal | * |
| sourcetreesolutions | mojoportal | 2.3.8.5 |
| sourcetreesolutions | mojoportal | 2.3.9.3 |
| sourcetreesolutions | mojoportal | 2.3.1.9 |
| sourcetreesolutions | mojoportal | 2.3.6.5 |
| sourcetreesolutions | mojoportal | 2.3.7.5 |
| sourcetreesolutions | mojoportal | 2.3.6.4 |
| sourcetreesolutions | mojoportal | 2.3.5.8 |
| sourcetreesolutions | mojoportal | 2.3.4.4 |
| sourcetreesolutions | mojoportal | 2.3.4.5 |
| sourcetreesolutions | mojoportal | 2.3.0.8 |
| sourcetreesolutions | mojoportal | 2.3.9.5 |
| sourcetreesolutions | mojoportal | 2.3.1.6 |
| sourcetreesolutions | mojoportal | 2.3.3.4 |
| sourcetreesolutions | mojoportal | 2.3.7.6 |
| sourcetreesolutions | mojoportal | 2.3.1.3 |
| sourcetreesolutions | mojoportal | 2.3.8.1 |
| sourcetreesolutions | mojoportal | 2.3.5.3 |
| sourcetreesolutions | mojoportal | 2.3.4.2 |
| sourcetreesolutions | mojoportal | 2.3.1.5 |
| sourcetreesolutions | mojoportal | 2.3.0.1 |
| sourcetreesolutions | mojoportal | 2.3.9.0 |
| sourcetreesolutions | mojoportal | 2.3.4.8 |
| sourcetreesolutions | mojoportal | 2.3.5.2 |