CVE-2005-0454

Vulnerability summary (CVE-2005-0454) : DCP-Port al 6.1.1 and earlier contain multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands. The issues are triggered via (1) index.php parameters lcat, doc, or uid, and (2) forums.php parameters mid or bid. The connecte...