CVE-2005-1701

Portailphp - SQL Injection

Title source: rule

Description

SQL injection vulnerability in PortailPHP 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to the (1) News, (2) File, (3) Liens, or (4) Faq modules.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Alberto Trivero · perlwebappsphp

https://www.exploit-db.com/exploits/1031

View Code ZIP pw:eip

References (3)

[Exploit] http://www.securityfocus.com/bid/13708

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1014036

[Mailing List] http://marc.info/?l=bugtraq&m=111686643823025&w=2

Scores

EPSS 0.0033

EPSS Percentile 55.8%

Details

Status published

Products (1)

portailphp/portailphp 1.3

Published May 24, 2005

Tracked Since Feb 18, 2026