CVE-2014-2211

POSH (Posh portal / Portaneo) up to version 3.2.x is affected by an SQL injection in portal/addtoapplication.php via the rssurl parameter. The flaw allows remote attackers to inject and execute arbitrary SQL commands. Root cause is input handling for rssurl not being properly sanitized. Impact is...

CVE-2014-2211

SQL injection vulnerability in portal/addtoapplication.php in POSH aka Posh portal or Portaneo 3.0 before 3.3.0 allows remote attackers to execute arbitrary SQL commands via the rssurl parameter...

CVE-2014-2211

creationtimestamp| type| source ---|---|--- 2014-02-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39108...