GCVE - cpe:2.3:a:wportfolio:wportfolio:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:wportfolio:wportfolio:*:*:*:*:*:*:*:*

part: a version: * update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-5221`	vulnerable	2026-06-08 04:50:50.150887	Details available The account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does not require knowledge of the original password, which allows remote attackers to change the admin account password via modified password and password_retype parameters. Published: 2008-11-25T18:09:00.000Z Updated: 2024-08-07T10:49:11.835Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/4631 https://www.exploit-db.com/exploits/7170 http://www.vupen.com/english/advisories/2008/3219 https://exchange.xforce.ibmcloud.com/vulnerabilities/46772 http://www.securityfocus.com/bid/32384	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5220`	vulnerable	2026-06-08 04:50:50.149941	Details available Unrestricted file upload vulnerability in admin/upload_form.php in wPortfolio 0.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in admin/tmp/. Published: 2008-11-25T18:09:00.000Z Updated: 2024-08-07T10:49:11.581Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/7165 http://www.vupen.com/english/advisories/2008/3219 https://exchange.xforce.ibmcloud.com/vulnerabilities/46745 http://www.securityfocus.com/bid/32367	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.