Published: 21/11/2008 Updated: 29/09/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 765

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in SePortal 2.4 allow remote malicious users to execute arbitrary SQL commands via the (1) poll_id parameter to poll.php and the (2) sp_id parameter to staticpages.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
seportal seportal 2.4

#################################################################### Exploit: SePortal 25 Sql Injection Vulnerabilty Author: jsass Date : 19\03\2014 Contact Twitter: @Kwsecurity Script: wwwseportalorg/ version: 25 Tested on: Linux Ubuntu 124 & Windows 7 Dork : "Powered by SePortal 25" //** Searching And Analysis By Kuwaity Crew ...

## # This module requires Metasploit: http//metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include Msf::Exploit::FileDropper def initialize(info={}) super(update ...

######################################################################### #################### Viva IslaM Viva IslaM ############################## ## ## Remote SQL Injection Vulnerability ## ## SePortal V24 ( pollphp poll_id ) ( staticpagesphp sp_id ) ## ######################################################################### ################# ...

CWE-89 http://secunia.com/advisories/30865 http://www.securityfocus.com/bid/29996 http://securityreason.com/securityalert/4623 http://www.securityfocus.com/bid/66315 https://exchange.xforce.ibmcloud.com/vulnerabilities/43450 https://www.exploit-db.com/exploits/5960 https://nvd.nist.gov https://www.exploit-db.com/exploits/32359/

CVE-2008-5191

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect