← Back

Miniportal

miniportal

Vendor: Instantservers Inc. • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2002-0261
1Instantservers Inc.
1Miniportal
Apr 16, 2026
May 29, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
Directory traversal vulnerability in InstantServers MiniPortal 1.1.5 and earlier allows remote authenticated users to read arbitrary files via a ... (modified dot dot) in the GET command.
CVE-2002-0260
1Instantservers Inc.
1Miniportal
Apr 16, 2026
May 29, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in InstantServers MiniPortal 1.1.5 and earlier allows remote attackers to execute arbitrary code via a long login name, which is not properly handled by the logging utility.
CVE-2002-0259
1Instantservers Inc.
1Miniportal
Apr 16, 2026
May 29, 2002
N/A· v4
N/A· v3
4.6 MEDIUM· v2
InstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext in (1) .pwd files in the miniportal/apache directory, or (2) mplog.txt, which could allow local users to gain privileges.