Loading vulnerability details…
CVSS v3.1
N/A
EPSS
1.00%
Published
Sep 30, 2008
Modified
Jun 16, 2026
Public PoC / Exploit (2)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter.
Weaknesses (CWE)
Affected Products (4)
References (10)