Jportal

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Jportal records in CISA KEV

No Jportal vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jportal Web Portal 5 records LOW Jportal 1 record LOW Jportal Web Server 1 record MEDIUM

Records

7 records

TI-2007-00888 CVE-2007-0912 · GHSA-73hh-5h2f-r5c3

Cross-Site Request Forgery (CSRF) vulnerability in admin/admin.adm.php in Jportal 2.3.1…

MEDIUM 44

Cross-Site Request Forgery (CSRF) vulnerability in admin/admin.adm.php in Jportal 2.3.1, and possibly earlier, allows remote attackers to perform privileged actions as administrators by tricking the admin into accessing…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0194 Published 2007-02-13 No fix listed

TI-2004-01909 CVE-2004-2036 · GHSA-r47w-m25r-5m77

SQL injection vulnerability in the art_print function in print.inc.php in unknown…

LOW 38

SQL injection vulnerability in the art_print function in print.inc.php in unknown versions of jPortal before 2.3.1 allows remote attackers to inject arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02705 Published 2005-05-10 No fix listed

TI-2008-06141 CVE-2008-6451 · GHSA-g3hr-vmq3-73w8

SQL injection vulnerability in humor.php in jPORTAL 2 allows remote attackers to execute…

LOW 35

SQL injection vulnerability in humor.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00931 Published 2009-03-13 No fix listed CWE-89

TI-2007-05712 CVE-2007-5974 · GHSA-9cvc-g6x4-jqfm

SQL injection vulnerability in mailer.php in JPortal 2 allows remote attackers to execute…

LOW 35

SQL injection vulnerability in mailer.php in JPortal 2 allows remote attackers to execute arbitrary SQL commands via the to parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01267 Published 2007-11-15 No fix listed CWE-89

TI-2007-05711 CVE-2007-5973 · GHSA-w859-pxm6-vjr6

SQL injection vulnerability in articles.php in JPortal 2.3.1 and earlier allows remote…

LOW 35

SQL injection vulnerability in articles.php in JPortal 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00987 Published 2007-11-15 No fix listed CWE-89

TI-2007-05651 CVE-2007-5912 · GHSA-mgm8-hx5r-428f

SQL injection vulnerability in mailer.php in jPORTAL 2 allows remote attackers to execute…

LOW 35

SQL injection vulnerability in mailer.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the to parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2007-11-10 No fix listed CWE-89

TI-2005-03332 CVE-2005-3509 · GHSA-6x8c-5x8p-83f7

Multiple SQL injection vulnerabilities in JPortal allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in JPortal allow remote attackers to execute arbitrary SQL commands via (1) banner.php or the id parameter to (2) print.php, (3) comment.php, and (4) news.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01172 Published 2005-11-06 No fix listed

Open these records in search →

Critical	1
High	6
Medium	0
Low	0
No CVSS	0