Description
SQL injection vulnerability in photo.php in PHPortfolio, possibly 1.3, allows remote attackers to execute arbitrary SQL commands via the id parameter.
References (4)
Core 4
Core References
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/31143
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/31828
Exploit x_refsource_misc
http://packetstormsecurity.org/0809-exploits/phpportfolio-sql.txt
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/45078
Scores
EPSS
0.0114
EPSS Percentile
63.3%
Details
CWE
CWE-89
Status
published
Products (2)
outshine/phportfolio
outshine/phportfolio
1.3
Published
Sep 30, 2008
Tracked Since
Feb 18, 2026