Savewebportal

First CVE: Aug 24, 2005Active for: 21 yearsTotal CVEs: 5

Savewebportal is a web portal application with a compact vulnerability footprint centered on the single product of the same name. The observed weakness classes cluster around generic or miscellaneous input-handling and logic issues typical of web-facing applications. Current severity, exploitation, and CVE counts are shown alongside this summary.

FAUCET AI Generated

5

Total CVEs

More Total CVEs than 83% of tracked vendors

2.5

Avg CVEs / Product / Year

More Avg CVEs / Product / Year than 90% of tracked vendors

6.4

Avg CVSS Score

Higher Avg CVSS Score than 38% of tracked vendors

0.0%

In CISA KEV

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Savewebportal over time

Volume of CVEsAvg CVSS Base Score

First CVE

Aug 24, 2005

20 years ago

Most Recent CVE

Aug 7, 2006

7,292 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (5 CVEs).

5 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2006-4012MEDIUM Multiple PHP remote file inclusion vulnerabilities in circeOS SaveWeb Portal 3.4 allow remote attackers to execute arbitrary PHP code via a URL in the SITE_Path parameter to (1) po	Aug 7, 2006	5.1	23	NO	YES
CVE-2005-2685HIGH SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via a direct request to admin/PhpMyExplorer/editerfichier.php, then editing the desired file to contain the	Aug 24, 2005	7.5	19	NO	NO
CVE-2005-2686HIGH Directory traversal vulnerability in SaveWebPortal 3.4 allows remote attackers to include arbitrary files and execute arbitrary local PHP programs via ".." sequences in the (1) SIT	Aug 24, 2005	7.5	19	NO	NO
CVE-2005-2687HIGH PHP remote file inclusion vulnerability in SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via the (1) SITE_Path parameter to menu_dx.php or (2) CONTENTS_Di	Aug 24, 2005	7.5	19	NO	NO
CVE-2005-2688MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in SaveWebPortal 3.4 allow remote attackers to inject arbitrary web script or HTML via a large number of parameters to (1) foote	Aug 24, 2005	4.3	14	NO	NO

View all 5 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products5 CVEs

40%

60%

Severity distribution among all CVEs352,708 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown5 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown5 (100.0%)

User Interaction

None0 (0.0%)

Unknown5 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown5 (100.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (5 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

1 CVE

20.0% of CVEs· 77th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Savewebportal.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Savewebportal — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Savewebportal's Products

View all 1 CNAs →