Jportal

jportal

7 CVEs • 3 products

Products (3)

Click to collapse

Toggle

Jportal Web Portal

jportal_web_portal

Jportal Web Server

jportal_web_server

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-6451 1Jportal 1Jportal Apr 23, 2026 Mar 13, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in humor.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2004-2036 or CVE-2005-3509.
CVE-2007-5974 1Jportal 1Jportal Web Portal Apr 23, 2026 Nov 15, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in mailer.php in JPortal 2 allows remote attackers to execute arbitrary SQL commands via the to parameter.
CVE-2007-5973 1Jportal 1Jportal Web Portal Apr 23, 2026 Nov 15, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in articles.php in JPortal 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter.
CVE-2007-5912 1Jportal 1Jportal Web Portal Apr 23, 2026 Nov 10, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in mailer.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the to parameter.
CVE-2007-0912 1Jportal 1Jportal Web Server Apr 23, 2026 Feb 13, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 Cross-Site Request Forgery (CSRF) vulnerability in admin/admin.adm.php in Jportal 2.3.1, and possibly earlier, allows remote attackers to perform privileged actions as administrators by tricking the admin into accessing...Show more Cross-Site Request Forgery (CSRF) vulnerability in admin/admin.adm.php in Jportal 2.3.1, and possibly earlier, allows remote attackers to perform privileged actions as administrators by tricking the admin into accessing a URL with modified arguments to admin/admin.adm.php.Show less
CVE-2005-3509 1Jportal 1Jportal Web Portal Apr 16, 2026 Nov 6, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple SQL injection vulnerabilities in JPortal allow remote attackers to execute arbitrary SQL commands via (1) banner.php or the id parameter to (2) print.php, (3) comment.php, and (4) news.php.
CVE-2004-2036 1Jportal 1Jportal Web Portal Apr 16, 2026 May 28, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the art_print function in print.inc.php in unknown versions of jPortal before 2.3.1 allows remote attackers to inject arbitrary SQL commands via the id parameter.