Unrated
portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter.
CVE-2018-12110
First seen on SecPulse
References
- report github.com