CVE-2009-3148

Metadata

CVE-2009-3148
7.5
exploit-db.com
2009-09-10
2017-09-19 07:07

Description

Multiple SQL injection vulnerabilities in PortalXP Teacher Edition 1.2 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) calendar.php, (2) news.php, and (3) links.php; and the (4) assignment_id parameter to assignments.php.

Related Vulnerabilities