CVE-2005-3509 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 1.2% (pctl 67)
Patch early
A public exploit exists.
Description
Multiple SQL injection vulnerabilities in JPortal allow remote attackers to execute arbitrary SQL commands via (1) banner.php or the id parameter to (2) print.php, (3) comment.php, and (4) news.php.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 1.17% — more likely to be exploited than 67% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2005-11-06 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| jportal | jportal web portal |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | JPortal Web Portal 2.2.1/2.3.1 - 'comment.php' SQL Injection | 2005-11-04 |
| exploit-db | JPortal Web Portal 2.2.1/2.3.1 - 'news.php' SQL Injection | 2005-11-04 |
References
- http://foro.elhacker.net/index.php?topic=93436.0
- http://www.security.nnov.ru/Kdocument105.html
- http://www.securityfocus.com/bid/15324
- http://www.vupen.com/english/advisories/2005/2310
- http://foro.elhacker.net/index.php?topic=93436.0
- http://www.security.nnov.ru/Kdocument105.html
- http://www.securityfocus.com/bid/15324
- http://www.vupen.com/english/advisories/2005/2310
→ the Explorer · watch your stack · NVD