CVE-2005-1701 SQL injection vulnerability in PortailPHP 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to the (1) News, (2) File, (3) Liens, or (4) Faq modules.
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in PortailPHP 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to the (1) News, (2) File, (3) Liens, or (4) Faq modules.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| portailphp | = 1.3 | No fix listed |
References
- 20050521 SQL injections in PortailPHP mailing-list
- 1014036 vdb-entry
- 13708 exploit vdb-entry