CVE-2005-3052

jportal 2.3.1 - SQL Injection via Download Search Field

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-3052. PoCs published by krasza.

AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in JPortal by injecting a UNION-based query to extract admin credentials (nick and pass) from the 'admins' table. The payload bypasses input sanitization by appending a single quote and comment to the original query.

Description

SQL injection vulnerability in module/down.inc.php in jportal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the search field to download.php.

Exploits (1)

exploitdb WORKING POC VERIFIED
by krasza · textwebappsphp
https://www.exploit-db.com/exploits/26293

This exploit demonstrates an SQL injection vulnerability in JPortal by injecting a UNION-based query to extract admin credentials (nick and pass) from the 'admins' table. The payload bypasses input sanitization by appending a single quote and comment to the original query.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: JPortal (version not specified)
No auth needed
Prerequisites: Access to a vulnerable JPortal instance · Ability to send crafted input to a parameter vulnerable to SQL injection
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=112748957426316&w=2
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/20

Scores

EPSS 0.0106
EPSS Percentile 60.1%

Details

Status published
Published Sep 24, 2005
Tracked Since Feb 18, 2026