Description portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter. References https://github.com/oyeahtime/test/issues/2