CVE-2008-6451
Published Mar 13, 2009SQL injection vulnerability in humor.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2004-2036 or CVE…
Vendor archive
jportal CVEs
Beta · best-effort9 CVEs tagged to vendor jportal — 1 Critical, 8 High, 0 Medium, 0 Low, 0 Unrated.
CVE-2007-5973
Published Nov 15, 2007SQL injection vulnerability in articles.php in JPortal 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter.
CVE-2007-5974
Published Nov 15, 2007SQL injection vulnerability in mailer.php in JPortal 2 allows remote attackers to execute arbitrary SQL commands via the to parameter.
CVE-2007-5912
Published Nov 10, 2007SQL injection vulnerability in mailer.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the to parameter.
CVE-2007-0912
Published Feb 13, 2007Cross-Site Request Forgery (CSRF) vulnerability in admin/admin.adm.php in Jportal 2.3.1, and possibly earlier, allows remote attackers to perform privileged actions as administrat…
CVE-2005-3509
Published Nov 6, 2005Multiple SQL injection vulnerabilities in JPortal allow remote attackers to execute arbitrary SQL commands via (1) banner.php or the id parameter to (2) print.php, (3) comment.php…
CVE-2005-3052
Published Sep 24, 2005SQL injection vulnerability in module/down.inc.php in jportal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the search field to download.php.
CVE-2005-1071
Published Apr 12, 2005SQL injection vulnerability in banner.inc.php in JPortal Web Portal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the haslo parameter.
CVE-2004-2036
Published May 28, 2004SQL injection vulnerability in the art_print function in print.inc.php in unknown versions of jPortal before 2.3.1 allows remote attackers to inject arbitrary SQL commands via the…
Showing 1-9 of 9 CVEsPage 1 of 1