Jportal · Jportal · CVE-2004-2036
**Name of the Vulnerable Software and Affected Versions**
jPortal versions prior to 2.3.1
**Description**
A SQL injection issue exists in the `art print` function in `print.inc.php`, allowing remote attackers to inject arbitrary SQL commands via the `id` parameter.
**Recommendations**
For versions prior to 2.3.1, update to version 2.3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the `art print` function in `print.inc.php` to minimize the risk of exploitation. Avoid using the `id` parameter in the affected function until the issue is resolved.