CVE-2004-0662: Powerportal

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

PowerPortal 1.x allows remote attackers to gain sensitive information via invalid or missing parameters in HTTP requests to (1) resize.php or (2) modules.php, which reveals the path in an error message.

Affected products

• Powerportal Powerportal: version 1.1b only; version 1.3 only; version 1.3b only

Published 2004-08-06. Last modified 2026-06-16.