Mkportal

13 CVEs across 2 Mkportal products. Browse Mkportal vulnerabilities, severities, and proof-of-concept exploits.

Mkportal products with known CVEs

ProductCVEs
Mkportal12
Noboard Module1
Mkportal CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2007-64672007-12-20SQL injection vulnerability in index.php in MKPortal 1.1 RC1 allows remote attackers to execute arbitrary SQL commands via the ida parameter in a gallery foto_…
CVE-2007-38142007-07-17Multiple SQL injection vulnerabilities in MKPortal 1.1.1 allow remote attackers to execute arbitrary SQL commands via (1) the idurlo field in the delete_urlo f…
CVE-2007-38132007-07-17PHP remote file inclusion vulnerability in include/user.php in the NoBoard BETA module for MKPortal allows remote attackers to execute arbitrary PHP code via a…
CVE-2007-36372007-07-10SQL injection vulnerability in MKPortal 1.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZD-00000008. this informa…
CVE-2007-01942007-01-12admin.php in MKPortal M1.1 RC1 allows remote attackers to obtain sensitive information via a direct request with an MK_PATH=1 query string, which reveals the p…
CVE-2007-01922007-01-12Cross-site request forgery (CSRF) vulnerability in the save_main operation in the ad_perms section in admin.php in MKPortal allows remote attackers to modify p…
CVE-2007-01912007-01-12Cross-site scripting (XSS) vulnerability in admin.php in MKPortal allows remote attackers to inject arbitrary web script or HTML via two certain fields in a co…
CVE-2006-67412006-12-26Cross-site request forgery (CSRF) vulnerability in urlobox in MKPortal allows remote attackers to delete arbitrary messages as an administrator via a delete op…
CVE-2006-51392006-10-03Unspecified vulnerability in MkPortal allows remote attackers to corrupt web site content, and possibly have other impact, via a certain long Message that affe…
CVE-2006-46652006-09-09Cross-site scripting (XSS) vulnerability in index.php in MKPortal M1.1 Rc1 allows remote attackers to inject arbitrary web script or HTML via the ind parameter…
CVE-2006-35542006-07-13Directory traversal vulnerability in index.php in MKPortal 1.0.1 Final allows remote attackers to include and execute arbitrary local files via directory trave…
CVE-2006-20672006-04-27SQL injection vulnerability in vb_board_functions.php in MKPortal 1.1, as used with vBulletin 3.5.4 and earlier, allows remote attackers to execute arbitrary S…
CVE-2006-20662006-04-27Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attack…