Approved changes feed: RSS · Atom

cpe:2.3:a:mkportal:mkportal:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMkportal (20c2707e-13e4-5a90-84da-e07dffc321a8)
ProductMkportal (67d3e423-9e30-5965-a768-2343c2e41a14)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/lupomeo/mkportal purl2cpe 2026-06-01 10:13:20.740304

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-0192 vulnerable 2026-06-08 04:49:31.653115 Details available
Cross-site request forgery (CSRF) vulnerability in the save_main operation in the ad_perms section in admin.php in MKPortal allows remote attackers to modify privilege settings, as demonstrated using a getURL of admin.php within a .swf file contained in an IFRAME element, aka the "All Guests are Admin" attack.
Published: 2007-01-11T02:00:00.000Z
Updated: 2024-08-07T12:12:17.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0191 vulnerable 2026-06-08 04:49:31.652750 Details available
Cross-site scripting (XSS) vulnerability in admin.php in MKPortal allows remote attackers to inject arbitrary web script or HTML via two certain fields in a contents_new operation in the ad_contents section.
Published: 2007-01-11T02:00:00.000Z
Updated: 2024-08-07T12:12:17.430Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5139 vulnerable 2026-06-08 04:49:19.755927 Details available
Unspecified vulnerability in MkPortal allows remote attackers to corrupt web site content, and possibly have other impact, via a certain long Message that affects "Tables," related to the Urlobox.
Published: 2006-10-02T20:00:00.000Z
Updated: 2024-08-07T19:41:05.438Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.