high7.5
CVE-2008-4348
SQL injection vulnerability in photo.php in PHPortfolio, possibly 1.3, allows remote attackers to execute arbitrary SQL commands via the id parameter.
Impact
SQL injection vulnerability in photo.php in PHPortfolio, possibly 1.3, allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Outshine | Phportfolio | All versions Version 1.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/0809-exploits/phpportfolio-sql.txt
- http://secunia.com/advisories/31828
- http://www.securityfocus.com/bid/31143
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45078
- http://packetstormsecurity.org/0809-exploits/phpportfolio-sql.txt
- http://secunia.com/advisories/31828
- http://www.securityfocus.com/bid/31143
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45078