CVE:CVE-2005-2486
CNNVD:CNNVD-200508-076
PortailPHP是完全用PHP编写的内容管理系统，可以快速生成动态站点。
PortailPHP的index.php中存在SQL注入漏洞，数据库中的错误可能泄漏完整的路径信息：Warning: mysql_result(): Unable to jump to row 0 on MySQL result index 34 in /home/httpd/vhosts/***/httpdocs/portailphp/mod_forum/read_mess.php on line 14)
solution:Upgrade portailphp portailphp to a higher version than 2.4,and avoid the version 2.4