Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 24/05/2005 Updated: 18/10/2016

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in PortailPHP 1.3 allows remote malicious users to execute arbitrary SQL commands via the id parameter to the (1) News, (2) File, (3) Liens, or (4) Faq modules.

Vulnerable Product	Search on Vulmon	Subscribe to Product
portailphp portailphp 1.3

#!/usr/bin/perl -w # # SQL Injection Exploit for Portail PHP < 13 # This exploit show the username of the administrator of the portal and his password crypted in MD5 # Related advisory: wwwsecurityfocuscom/archive/1/398728/2005-05-21/2005-05-27/0 # Coded by Alberto Trivero use LWP::Simple; print "\n\t================================= ...

NVD-CWE-Other http://www.securityfocus.com/bid/13708 http://securitytracker.com/id?1014036 http://marc.info/?l=bugtraq&m=111686643823025&w=2 https://nvd.nist.gov https://www.exploit-db.com/exploits/1031/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-1701

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect