CVE-2008-0141: Webportal CMS Project Webportal CMS

High severity, CVSS 7.5. EPSS: 4.3% chance of exploitation in the next 30 days.

actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it easier for remote attackers to obtain access to any account via a lostpass action.

Affected products

• Webportal CMS Project Webportal CMS: version 0.6.0 only

Published 2008-01-08. Last modified 2026-06-16.