portal Vulnerabilities
92 vulnerabilities related to portal
- PoC2026-04-09CVE-2025-4576: Liferay Portal & DXP - Cross-Site Scripting
- 2026-03-27Liferay Portal/DXP存在XSS漏洞(CVE-2025-4576)
- PoC2026-01-08CVE-2024-25608: Liferay Portal - Open Redirect
- 2025-10-29关于portal端importExcelTemplate接口任意文件上传漏洞修复通告
- 2025-09-01yonyou-nc-portalfile-fileread: 用友NC portal/file 任意文件读取漏洞
- 2025-08-26mojoPortal imagehandler存在任意文件读取漏洞
- 2025-08-05（CVE-2025-4604）Liferay Portal和DXP版本验证码绕过导致远程代码执行漏洞
- PoC2025-08-01CVE-2010-1312: Joomla! Component News Portal 1.5.x - Local File Inclusion
- PoC2025-08-01CVE-2015-3897: Bonita BPM Portal <6.5.3 - Local File Inclusion
- PoC2025-08-01CVE-2017-14186: FortiGate FortiOS SSL VPN Web Portal - Cross-Site Scripting
- PoC2025-08-01CVE-2020-7961: Liferay Portal Unauthenticated < 7.2.1 CE GA2 - Remote Code Execution
- PoC2025-08-01CVE-2022-42118: Liferay Portal - Cross-site Scripting
- PoC2025-08-01CVE-2023-24322: mojoPortal 2.7.0.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-44012: mojoPortal v.2.7.0.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-4490: WordPress Job Portal < 2.0.6 - SQL Injection
- PoC2025-08-01CVE-2025-28367: mojoPortal <=2.9.0.1 - Directory Traversal
- PoC2025-08-01CVE-2025-4388: Liferay Portal - Cross-Site Scripting
- PoC2025-08-01CVE-2020-7961: Liferay Portal RCE 反序列化命令执行漏洞
- PoC2025-08-01CVE-2021-42670: Engineers Online Portal 1.0 容易受到三种类型的SQL注入攻击
- PoC2025-08-01dbappsecurity-mingyu-aaa-portal-auth-local-submit-rce: 安恒 明御安全网关 aaa_portal_auth_local_submit 远程命令执行漏洞
- PoC2025-08-01ayco-portal-csp-bypass: Content-Security-Policy Bypass - Ayco Portal
- PoC2025-08-01yonyou-maportal-unauth: 用友移动系统管理 maportal 未授权访问
- PoC2025-08-01yonyou-nc-portalsesInittoolservice-disclosure: 用友 portalsesInittoolservice 泄露数据库账号密码
- PoC2025-08-01portal-api-ssrf: Portal API - Server Side Request Forgery
- PoC2025-08-01fortiportal-log4j-rce: FortiPortal - Remote Code Execution (Apache Log4j)
- PoC2025-08-01weaver-sptmforportalthumbnail-lfi: OA E-Weaver SptmForPortalThumbnail - Arbitrary File Read
- PoC2025-08-01yonyou-ufida-nc-lfi: UFIDA NC Portal - Arbitrary File Read
- PoC2025-08-01sap-netweaver-portal: SAP NetWeaver Portal - Detect
- 2025-07-30关于NC Portal端MtAppTimeLineAction接口存在SQL注入漏洞修复通告
- 2025-06-21关于portal content pk_funnode 接口存在SQL注入漏洞的修复通告
- 2025-05-15LiferayPortal存在反射xss漏洞(CVE-2025-4388)
- 2025-05-09MojoPortal /api/BetterImageGallery/imagehandler 文件读取漏洞（CVE-2025-28367）
- 2025-05-09MojoPortal /api/BetterImageGallery/imagehandler 文件读取漏洞（CVE-2025-28367）
- 2025-05-07(CVE-2025-4388)Liferay Portal及DXP反射型跨站脚本漏洞
- 2025-04-26关于portal-menu-single-view接口存在sql注入漏洞修复方案
- 2025-04-06SourceCodester Online Tutor Portal 注入漏洞
- 2025-04-05SourceCodester Online Tutor Portal 注入漏洞
- 2025-01-13WordPress plugin Perfect Portal Widgets 跨站脚本漏洞
- 2024-11-28KingPortal开发系统 getConfigInfo 未授权访问漏洞
- 2024-11-08Cisco Unified Contact Center Management Portal 跨站脚本漏洞
- 2024-11-07Esri Portal For ArcGIS 未授权 路径遍历漏洞
- 2024-11-04北京亚控科技 KingPortal开发系统 img 未授权 路径遍历漏洞
- 2024-10-30KingPortal开发系统 kingclient 任意文件读取漏洞
- 2024-10-29KingPortal开发系统存在任意文件读取漏洞
- 2024-08-26Fabianros Job_portalSQL注入漏洞(CVE-2024-8167)
- 2024-05-17CheckPoint Gaia Portal CVE-2023-28130 命令注入漏洞
- 2024-04-30KingPortal开发系统 externalConfig.json 存在信息泄露漏洞
- 2024-04-10Esri Portal For ArcGIS 路径遍历漏洞
- 2024-04-10Esri Portal For ArcGIS 跨站脚本漏洞
- 2024-04-10Esri Portal For ArcGIS 跨站脚本漏洞
- 2024-04-10Esri Portal For ArcGIS 跨站脚本漏洞
- 2024-04-10Esri Portal For ArcGIS 跨站请求伪造漏洞
- 2024-03-19Liferay Portal存在未授权命令执行(CVE-2020-7961)
- 2024-02-22Sophos Firewall User Portal and Webadmin 代码注入漏洞
- 2024-02-10N-able PassPortal 日志信息泄露漏洞
- 2024-02-07F5 BIG-IP iControlPortal 格式字符串漏洞
- 2023-07-22Esri Portal For ArcGIS 跨站脚本漏洞
- 2023-07-22Esri Portal For ArcGIS 跨站脚本漏洞
- 2023-05-29Liferay Portal 远程代码执行漏洞
- 2023-05-11Esri Portal For ArcGIS 跨站请求伪造漏洞
- 2023-05-11Esri Portal for ArcGIS 跨站脚本漏洞
- 2023-05-11Esri Portal For ArcGIS 跨站脚本漏洞
- 2023-05-11Esri Portal For ArcGIS 跨站脚本漏洞
- 2023-04-12mojoPortal-XSS(CVE-2023-24322)
- 2022-12-30Esri Portal For ArcGIS 跨站脚本漏洞
- 2022-12-30Esri Portal For ArcGIS 跨站脚本漏洞
- 2022-12-30Esri Portal For ArcGIS 跨站脚本漏洞
- 2022-12-30Esri Portal for ArcGIS 路径遍历漏洞
- 2022-12-30Esri Portal For ArcGIS 跨站脚本漏洞
- 2022-12-30Esri Portal For ArcGIS 跨站脚本漏洞
- 2022-08-17Esri Portal for ArcGIS 跨站脚本漏洞
- 2022-08-17Esri Portal for ArcGIS 跨站脚本漏洞
- 2022-08-17Esri Portal For ArcGis 代码注入漏洞
- 2022-08-16Esri Portal For ArcGis 跨站脚本漏洞
- 2022-08-16Esri Portal For ArcGis 跨站脚本漏洞
- 2022-08-16Esri Portal For ArcGis 跨站脚本漏洞
- 2022-08-16Esri Portal For ArcGis 跨站脚本漏洞
- 2022-06-15CoreHR Core Portal 跨站请求伪造漏洞
- 2022-06-04ACEware Systems ACEweb Online Portal 任意文件上传漏洞
- 2021-10-01Esri Portal for ArcGIS 跨站脚本漏洞
- 2021-10-01Esri Portal for ArcGIS 跨站脚本漏洞
- 2021-01-19东软通用门户软件 UniPortal 1.2通用型-未授权访问
- 2019-10-26CoreHR Core Portal 跨站脚本漏洞
- 2014-10-29IBM WebSphere Portal 远程代码执行漏洞
- 2014-02-14IBM WebSphere Portal 任意文件上传漏洞
- 2013-01-24NetArt Media Car Portal 任意文件上传漏洞
- 2009-08-12ScriptsFeed Recipes Listing Portal 任意文件上传漏洞
- 2009-08-11Theportal2.Pl '/admin/galeria.php'任意文件上传漏洞
- 2009-01-31Memht Miltenovik Manojlo MemHT Portal index.php任意文件上传漏洞
- 新人類資訊科技｜NUP Portal - 存在2個漏洞
- 飛騰雲端 HR Portal - Insufficient Session Expiration
- 飛騰雲端 HR Portal - Weak Password Recovery Mechanism for Forgotten Password