Lucene search

[email protected]CVE-2005-3365

HistoryOct 30, 2005 - 2:34 p.m.

CVE-2005-3365

2005-10-3014:34:00

CWE-89

[email protected]

web.nvd.nist.gov

sql injection

dcp-portal

remote attackers

security vulnerability

8.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.6%

JSON

Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via (1) the name parameter in register.php, (2) the email parameter in lostpassword.php, (3) the year parameter in calendar.php, and the (4) cid parameter to index.php. NOTE: the mid parameter for forums.php is already associated with CVE-2005-0454. NOTE: the index.php/cid vector was later reported to affect 6.11.

CPENameOperatorVersion
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq3.7
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.3.2
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.0.2
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.2
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq4.1
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.3
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.0.1
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.3.1
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq6.0
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq4.5.1

CPE	Name	Operator	Version
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	3.7
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.3.2
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.0.2
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.2
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	4.1
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.3
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.0.1
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.3.1
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	6.0
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	4.5.1

Rows per page:

1-10 of 131

References

glide.stanford.edu/yichen/research/sec.pdf

marc.info/?l=bugtraq&m=113017151829342&w=2

secunia.com/advisories/12751/

securityreason.com/securityalert/108

www.osvdb.org/20493

www.osvdb.org/20494

www.securityfocus.com/archive/1/419280/100/0/threaded

www.securityfocus.com/bid/15183

www.securityfocus.com/bid/27167

exchange.xforce.ibmcloud.com/vulnerabilities/22855

exchange.xforce.ibmcloud.com/vulnerabilities/39447

www.exploit-db.com/exploits/4853

8.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.6%

JSON

Related for CVE-2005-3365

nessus1 cve3