Approved changes feed: RSS · Atom

cpe:2.3:a:mojoportal:mojoportal:2.7.0.0:*:*:*:*:*:*:*

part: a version: 2.7.0.0 update: *

VendorMojoportal (2dd68034-9e82-5b0c-bb51-85f8da928ace)
ProductMojoportal (bf7b1e1f-28b7-5010-897d-d39fde6e877a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/i7media/mojoportal purl2cpe 2026-06-01 10:14:36.753551
pkg:rpm/opensuse/mojoportal purl2cpe 2026-06-01 10:14:36.753552
pkg:sourceforge/mojoportal purl2cpe 2026-06-01 10:14:36.753553

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-44012 vulnerable 2026-06-08 06:12:38.225041 Details available
Cross Site Scripting vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the helpkey parameter in the Help.aspx component.
Published: 2023-10-02T00:00:00.000Z
Updated: 2024-09-23T16:26:27.310Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44011 vulnerable 2026-06-08 06:12:38.224272 Details available
An issue in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the layout.master skin file at the Skin management component.
Published: 2023-10-02T00:00:00.000Z
Updated: 2024-09-23T16:29:08.789Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44009 vulnerable 2026-06-08 06:12:38.223736 Details available
File Upload vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the Skin Management function.
Published: 2023-10-02T00:00:00.000Z
Updated: 2024-09-23T15:53:23.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44008 vulnerable 2026-06-08 06:12:38.223280 Details available
File Upload vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the File Manager function.
Published: 2023-10-02T00:00:00.000Z
Updated: 2024-09-23T16:13:27.599Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24689 vulnerable 2026-06-08 05:56:06.197627 Details available
An issue in Mojoportal v2.7.0.0 and below allows an authenticated attacker to list all css files inside the root path of the webserver via manipulation of the "s" parameter in /DesignTools/ManageSkin.aspx
Published: 2023-02-09T00:00:00.000Z
Updated: 2025-03-24T18:32:21.019Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24688 vulnerable 2026-06-08 05:56:06.197204 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24687 vulnerable 2026-06-08 05:56:06.196887 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24323 vulnerable 2026-06-08 05:56:05.298762 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24322 vulnerable 2026-06-08 05:56:05.298322 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40341 vulnerable 2026-06-08 05:48:24.919213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40123 vulnerable 2026-06-08 05:48:22.908962 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.