Approved changes feed: RSS · Atom

cpe:2.3:a:sourcetreesolutions:mojoportal:2.3.4.3:*:*:*:*:*:*:*

part: a version: 2.3.4.3 update: *

VendorSourcetreesolutions (8e8bdd96-5576-51b6-b93a-9b5f5260fd19)
ProductMojoportal (38cd85af-103b-581f-8bb6-1f5cb00e8ecf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/i7media/mojoportal purl2cpe 2026-06-01 10:16:13.156012
pkg:github/starbaseaurora/mojoportal purl2cpe 2026-06-01 10:16:13.156014
pkg:rpm/opensuse/mojoportal purl2cpe 2026-06-01 10:16:13.156015
pkg:sourceforge/mojoportal purl2cpe 2026-06-01 10:16:13.156017

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3603 vulnerable 2026-06-08 04:55:15.721214 Details available
Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to hijack the authentication of administrators for requests that rename arbitrary files, as demonstrated by causing the user.config file to be moved, leading to a denial of service (service stop) and possibly the exposure of sensitive information.
Published: 2010-09-24T19:44:00.000Z
Updated: 2024-08-07T03:18:52.650Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3602 vulnerable 2026-06-08 04:55:15.719952 Details available
Cross-site scripting (XSS) vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to inject arbitrary web script or HTML via the User ID parameter. NOTE: some of these details are obtained from third party information.
Published: 2010-09-24T19:44:00.000Z
Updated: 2024-08-07T03:18:52.882Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.