Mojoportal

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:mojoportal:mojoportal:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMojoportal (2dd68034-9e82-5b0c-bb51-85f8da928ace)
ProductMojoportal (bf7b1e1f-28b7-5010-897d-d39fde6e877a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/i7media/mojoportal purl2cpe 2026-06-01 10:14:36.753530
pkg:rpm/opensuse/mojoportal purl2cpe 2026-06-01 10:14:36.753532
pkg:sourceforge/mojoportal purl2cpe 2026-06-01 10:14:36.753533

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-28367 vulnerable 2026-06-08 07:14:56.074273 Details available
mojoPortal <=2.9.0.1 is vulnerable to Directory Traversal via BetterImageGallery API Controller - ImageHandler Action. An attacker can exploit this vulnerability to access the Web.Config file and obtain the MachineKey.
Published: 2025-04-21T00:00:00.000Z
Updated: 2025-04-21T15:58:19.696Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7447 vulnerable 2026-06-08 05:12:03.703456 Details available
mojoPortal through 2.6.0.0 is prone to multiple persistent cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. The 'Title' and 'Subtitle' fields of the 'Blog' page are vulnerable. NOTE: The software maintainer disputes this as a vulnerability because the fields claimed to be vulnerable to XSS are only available to administrators who are supposed to have access to add scripts
Published: 2018-02-24T02:00:00.000Z
Updated: 2024-08-05T06:24:11.904Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.