CVE-2009-3148

PortalXP Teacher Edition 1.2 is affected by multiple SQL injection vulnerabilities. The issue allows remote attackers to inject arbitrary SQL via the id parameter to calendar.php, news.php, and links.php, and via the assignment_id parameter to assignments.php. These details are consistently descr...

CVE-2009-3148

Multiple SQL injection vulnerabilities in PortalXP Teacher Edition 1.2 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 calendar.php, 2 news.php, and 3 links.php; and the 4 assignmentid parameter to assignments.php...