Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2619▼ 461 respecto a la semana anterior

Críticas / altas1277▼ 72 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)235▼ 274 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2006-4770	Modificada	Alta (7.5)	2.5%	—	Miniportal	13/9/2006	16/6/2026	PHP remote file inclusion vulnerability in menu.php in MiniPort@l 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skiny parameter.
CVE-2003-0272	Modificada	Alta (10)	2.2%	—	Miniportal	27/5/2003	16/6/2026	admin.php in miniPortail allows remote attackers to gain administrative privileges by setting the miniPortailAdmin cookie to an "adminok" value.
CVE-2002-0260	Modificada	Alta (7.5)	3.3%	—	Instantservers Inc. Miniportal	29/5/2002	16/6/2026	Buffer overflow in InstantServers MiniPortal 1.1.5 and earlier allows remote attackers to execute arbitrary code via a long login name, which is not properly handled by the logging utility.
CVE-2002-0261	Modificada	Alta (7.5)	1.9%	—	Instantservers Inc. Miniportal	29/5/2002	16/6/2026	Directory traversal vulnerability in InstantServers MiniPortal 1.1.5 and earlier allows remote authenticated users to read arbitrary files via a ... (modified dot dot) in the GET command.
CVE-2002-0259	Modificada	Media (4.6)	0.39%	—	Instantservers Inc. Miniportal	29/5/2002	16/6/2026	InstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext in (1) .pwd files in the miniportal/apache directory, or (2) mplog.txt, which could allow local users to gain privileges.