CVE-2004-2036
jPortal Web Portal - SQL Injection via id Parameter in art_print Function
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-2036. PoCs published by Maciek Wierciski.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in JPortal's print.inc.php script. The PoC shows how an attacker can manipulate the 'id' parameter in a URI to extract sensitive information, such as administrator password hashes, via a UNION-based SQL injection.
Description
SQL injection vulnerability in the art_print function in print.inc.php in unknown versions of jPortal before 2.3.1 allows remote attackers to inject arbitrary SQL commands via the id parameter.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in JPortal's print.inc.php script. The PoC shows how an attacker can manipulate the 'id' parameter in a URI to extract sensitive information, such as administrator password hashes, via a UNION-based SQL injection.