Precurio vulnerabilities

Products

• Precurio Intranet Portal 2
• intranet portal 1
• precurio 1

Latest Precurio CVEs

Newest publication first

1. CVE-2026-32989 Precurio Intranet Portal 4.4: Cross-Site Request Forgery leading to arbitrary file upload

   Published 2026-03-20

   High·CVSS 8.6 EPSS 0.22%

   Precurio Intranet Portal 4.4 contains a cross-site request forgery vulnerability that allows attackers to induce authenticated users to submit crafted requests to a profile update endpoint handling file uploads. Attackers can exploit this to upload executable files to web-accessi...

2. CVE-2018-25168 Precurio Intranet Portal 2.0 Cross-Site Request Forgery Add Admin

   Published 2026-03-06

   Medium·CVSS 5.3 EPSS 0.26%

   Precurio Intranet Portal 2.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by submitting crafted POST requests. Attackers can forge requests to the /public/admin/user/submitnew endpoint with user c...

3. CVE-2016-10759 The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to...

   Published 2019-05-24

   Critical·CVSS 9.8 EPSS 3.7%

   The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resultant arbitrary code execution, via ExtendedFileManager/Classes/ExtendedFileManager.php because ExtendedFileManager can be used to rename the .htaccess file that blocks .php uploads.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.