CVE-2008-6451

SQL injection vulnerability in humor.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2004-2036 or CVE-2005-3509...

CVE-2008-6451

CVE-2008-6451 describes an SQL injection in jPortal 2 via the id parameter in humor.php. The separate CVEs show related issues in jPortal across older versions, notably CVE-2004-2036 (art_print function in print.inc.php vulnerable to injection via id) and CVE-2005-3509 (multiple SQL injection vec...