Multiple ASPapp Portal Vulnerabilities

Bugtraq ID:	9250
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Dec 18 2003 12:00AM
Updated:	Dec 18 2003 12:00AM
Credit:	Discovery of these vulnerabilities has been credited to JeiAr <[email protected]>.
Vulnerable:	Iatek PortalApp 0 ASPapp ProjectApp ASPapp IntranetApp 2.3
Not Vulnerable:

Multiple ASPapp Portal Vulnerabilities

ASPapp PortalApp, IntranetApp and ProjectApp have been reported prone to multiple vulnerabilities. The issues are due to design errors and insufficient sanitization performed on user supplied data. An attacker may exploit these issues to elevate privileges, hijack accounts, disclose portal user passwords and mount HTML injection and cross-site scripting style attacks.

Multiple ASPapp Portal Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Multiple ASPapp Portal Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Multiple ASPapp Portal Vulnerabilities

References:

• IntranetApp Homepage (ASPapp)
  
• PortalApp Homepage (ASPapp)
  
• ProjectApp Homepage (ASPapp)
  
• Multiple Vulnerabilities In ASPapp Products (JeiAr )