Trol InterMedia 2ClickPortal SQL注入漏洞

Trol InterMedia 2ClickPortal is a web portal from Trol InterMedia, Inc. Trol InterMedia 2ClickPortal suffers from a SQL injection vulnerability that stems from improper neutralization of the changesreferenceid parameter input, which could lead to a blind Boolean-based SQL injection attack...

CVE-2024-5961

Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting XSS. An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. This issue affects 2ClickPortal software...