GCVE - cpe:2.3:a:mkportal:mkportal:1.1_rc1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mkportal:mkportal:1.1_rc1:*:*:*:*:*:*:*

part: a version: 1.1_rc1 update: *

Vendor	Mkportal (`20c2707e-13e4-5a90-84da-e07dffc321a8`)
Product	Mkportal (`67d3e423-9e30-5965-a768-2343c2e41a14`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/lupomeo/mkportal`	purl2cpe	2026-06-01 10:13:20.744416

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-6467`	vulnerable	2026-06-08 04:50:08.879054	Details available SQL injection vulnerability in index.php in MKPortal 1.1 RC1 allows remote attackers to execute arbitrary SQL commands via the ida parameter in a gallery foto_show action. Published: 2007-12-20T00:00:00.000Z Updated: 2024-08-07T16:11:05.944Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/39027 http://www.securityfocus.com/archive/1/485035/100/0/threaded http://securityreason.com/securityalert/3465 http://www.securityfocus.com/bid/26860	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0194`	vulnerable	2026-06-08 04:49:31.655566	Details available admin.php in MKPortal M1.1 RC1 allows remote attackers to obtain sensitive information via a direct request with an MK_PATH=1 query string, which reveals the path in an error message. Published: 2007-01-11T02:00:00.000Z Updated: 2024-08-07T12:12:17.767Z Open on db.gcve.eu Reference links http://osvdb.org/33407 http://www.securityfocus.com/archive/1/456257/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/31333	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4665`	vulnerable	2026-06-08 04:49:18.490736	Details available Cross-site scripting (XSS) vulnerability in index.php in MKPortal M1.1 Rc1 allows remote attackers to inject arbitrary web script or HTML via the ind parameter, possibly related to the PHP_SELF variable. NOTE: Some details are obtained from third party information. Published: 2006-09-09T00:00:00.000Z Updated: 2024-08-07T19:23:41.120Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/3518 https://exchange.xforce.ibmcloud.com/vulnerabilities/28812 http://secunia.com/advisories/21821 http://www.securityfocus.com/archive/1/445511/100/0/threaded http://securityreason.com/securityalert/1534	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2066`	vulnerable	2026-06-08 04:48:58.729828	Details available Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) u1, (2) m1, (3) m2, (4) m3, (5) m4 parameters. Published: 2006-04-27T10:00:00.000Z Updated: 2024-08-07T17:35:31.199Z Open on db.gcve.eu Reference links http://www.nukedx.com/?viewdoc=26 http://securitytracker.com/id?1015977 http://www.securityfocus.com/archive/1/447195/100/0/threaded http://www.securityfocus.com/archive/1/447303/100/0/threaded http://www.vupen.com/english/advisories/2006/1485	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.