SQL injection vulnerability in mailer.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the to parameter.
- https://www.exploit-db.com/exploits/4611
No PoCs found on GitHub currently.