Description
SQL injection vulnerability in photo.php in PHPortfolio, possibly 1.3, allows remote attackers to execute arbitrary SQL commands via the id parameter.
References
- 31143 vdb-entry
- 31828 third-party-advisory
- http://packetstormsecurity.org/0809-exploits/phpportfolio-sql.txt
- phportfolio-photo-sql-injection(45078) vdb-entry