Yapis

**Name of the Vulnerable Software and Affected Versions** JPortal (affected versions not specified) **Description** The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities allow remote attackers to execute arbitrary SQL commands. The affected API endpoints include "banner.php" and the "id" parameter to "print.php", "comment.php", and "news.php". **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.