portal · threatengine.sh

CVE-2026-24778

>= 2.29.1 and < 2.51.5

Ghost is an open source content management system. In Ghost versions 5.43.0 through 5.12.04 and 6.0.0 through 6.14.0, an attacker

8.8HIGH

CVE-2019-13343

< 1.0.27

Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file download.

7.5HIGH

CVE-2019-7551

< 3.2.13

Cantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x before 3.4.9 has XSS. Leveraging this vulnerability would enable perfo

9.0CRITICAL

CVE-2014-8268

<= 2012.2.0

QPR Portal before 2012.2.1 allows remote attackers to modify or delete notes via a direct request.

CVE-2014-8267

<= 2014.1.1

Cross-site scripting (XSS) vulnerability in QPR Portal 2014.1.1 and earlier allows remote attackers to inject arbitrary web script

CVE-2014-8266

<= 2014.1.1

Multiple cross-site scripting (XSS) vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote atta

CVE-2011-1504

all versions

Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA allows remote authen

CVE-2011-1569

all versions

download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary files under the web root via (1)

CVE-2007-6055

all versions

Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Portal 4.1.0 and 4.1.1 allows remote attackers to inject arb

CVE-2007-5490

all versions

SQL injection vulnerability in default.asp in Okul Otomasyon Portal 2.0 allows remote attackers to execute arbitrary SQL commands

CVE-2006-6641

all versions

Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products inc

qpr portal