VYPR

Miniportal

by Instantservers Inc.

CVEs (3)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2002-02590.000.00May 29, 2002InstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext in (1) .pwd files in the miniportal/apache directory, or (2) mplog.txt, which could allow local users to gain privileges.
CVE-2002-02600.000.03May 29, 2002Buffer overflow in InstantServers MiniPortal 1.1.5 and earlier allows remote attackers to execute arbitrary code via a long login name, which is not properly handled by the logging utility.
CVE-2002-02610.000.03May 29, 2002Directory traversal vulnerability in InstantServers MiniPortal 1.1.5 and earlier allows remote authenticated users to read arbitrary files via a ... (modified dot dot) in the GET command.