peter bassill · operator
$ cve CVE-2004-2036 JSON

CVE-2004-2036 EXPLOIT

7.5
HIGH · CVSS 2.0 · EPSS 2.7% (pctl 86)

Patch early

A public exploit exists.

Description

SQL injection vulnerability in the art_print function in print.inc.php in unknown versions of jPortal before 2.3.1 allows remote attackers to inject arbitrary SQL commands via the id parameter.

Scoring

CVSS7.5 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS2.71% — more likely to be exploited than 86% of all CVEs
On CISA KEVno
Public exploityes
Published2004-05-28
Last modified2026-06-16

Affected (1)

VendorProduct
jportaljportal web portal

Public exploits

SourceTitleDate
exploit-dbjPORTAL 2.2.1 - 'print.php' SQL Injection2004-05-28

References

→ the Explorer  ·  watch your stack  ·  NVD