Approved changes feed: RSS · Atom

cpe:2.3:a:precurio:precurio_intranet_portal:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPrecurio (2c9a4262-6f59-5fbd-ae35-b1e0a0c1b3b0)
ProductPrecurio Intranet Portal (e60d238e-a7bd-5d1b-8ecc-b15e563588ab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-32989 vulnerable 2026-06-08 07:57:18.421826 Precurio Intranet Portal 4.4: Cross-Site Request Forgery leading to arbitrary file upload
HIGH (8.8)
Precurio Intranet Portal 4.4 contains a cross-site request forgery vulnerability that allows attackers to induce authenticated users to submit crafted requests to a profile update endpoint handling file uploads. Attackers can exploit this to upload executable files to web-accessible locations, leading to arbitrary code execution in the context of the web server.
Published: 2026-03-20T15:50:16.884Z
Updated: 2026-05-13T19:36:14.644Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-25168 vulnerable 2026-06-08 05:11:29.523572 Precurio Intranet Portal 2.0 Cross-Site Request Forgery Add Admin
MEDIUM (4.3)
Precurio Intranet Portal 2.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by submitting crafted POST requests. Attackers can forge requests to the /public/admin/user/submitnew endpoint with user creation parameters to add new admin accounts without requiring CSRF tokens or user interaction.
Published: 2026-03-06T12:18:59.703Z
Updated: 2026-03-09T19:04:14.695Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.