Sql injection

SQL injection vulnerability in index.php in MKPortal 1.1 RC1 allows remote attackers to execute arbitrary SQL commands via the ida parameter in a gallery fotoshow action...

CVE-2007-6467

CVE-2007-6467 describes an SQL injection in MKPortal 1.1 RC1, specifically in index.php during the gallery foto_show action, exploitable via the ida parameter. The underlying issue is injectable SQL passed from user-controlled input, enabling remote attackers to execute arbitrary SQL commands. Th...