CVE-2007-1641

Portailphp - SQL Injection

Title source: rule

Description

SQL injection vulnerability in index.php in PortailPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the idnews parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Mehmet Ince · perlwebappsphp

https://www.exploit-db.com/exploits/3543

View Code ZIP pw:eip

References (5)

[Exploit] http://www.securityfocus.com/bid/23096

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/33145

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/3543

[Third Party Advisory, VDB Entry] http://osvdb.org/34410

[Third Party Advisory] http://secunia.com/advisories/24620

Scores

EPSS 0.0071

EPSS Percentile 72.0%

Classification

Status draft

Affected Products (1)

portailphp/portailphp

Timeline

Published Mar 23, 2007

Tracked Since Feb 18, 2026