Approved changes feed: RSS · Atom

cpe:2.3:a:iatek:portalapp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIatek (3ffebacc-9d59-50b1-99e4-7d0d8f963ed0)
ProductPortalapp (8742146c-6fa7-501e-abca-56b2eeac7855)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/iatek/one-page-app purl2cpe 2026-06-01 10:18:13.847456

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-0949 vulnerable 2026-06-08 04:48:14.024706 Details available
Multiple cross-site scripting (XSS) vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the (1) contenttype or (2) keywords parameter.
Published: 2005-04-03T05:00:00.000Z
Updated: 2024-08-07T21:28:29.109Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0948 vulnerable 2026-06-08 04:48:14.024420 Details available
SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via the banner_id parameter.
Published: 2005-04-03T05:00:00.000Z
Updated: 2024-08-07T21:28:29.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1786 vulnerable 2026-06-08 04:48:07.635892 Details available
PortalApp places user credentials under the web root with insufficient access control, which allows remote attackers to gain access to sensitive information via a direct request to 8275.mdb.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:00:37.281Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.