486 matches found
CVE-2007-2278
CVE-2007-2278 affects DCP-Portal 6.1.1. The vulnerability is described as multiple PHP remote file inclusion weaknesses that allow remote attackers to execute arbitrary PHP code via a URL supplied in (1) the path parameter to library/adodb/adodb.inc.php, (2) the abs_path_editor parameter to libra...
CVE-2007-2278
Multiple PHP remote file inclusion vulnerabilities in DCP-Portal 6.1.1 allow remote attackers to execute arbitrary PHP code via a URL in 1 the path parameter to library/adodb/adodb.inc.php, 2 the abspatheditor parameter to library/editor/editor.php, or 3 the cfgfiletoload parameter to...
dcp-portal v611 >> RFi
vendor :http://www.dcp-portal.org/ by : www.hackerz.ir userz .saeid 1- remote DCP/library/adodb/adodb.inc.php ==== includeonce$path; 2- remote DCP/library/editor/editor.php ===== include $abspatheditor."PropAccestring.php 3- local == DCP/admin/phpMyAdmin/libraries/common.lib.php ===...
CVE-2006-4837
Multiple PHP remote file inclusion vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in 1 library/lib.php and 2 library/editor/editor.php. NOTE: the same primary issue can be used for full path disclosure with an invalid...
CVE-2006-4838
Multiple cross-site scripting XSS vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 rooturl and 2 dcpversion parameters in a admin/inc/footer.inc.php, and the rooturl, 3 pagetopname, 4 pagename, and 5 pageoptions parameters in b...
CVE-2006-4837
Multiple PHP remote file inclusion vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in 1 library/lib.php and 2 library/editor/editor.php. NOTE: the same primary issue can be used for full path disclosure with an invalid...
CVE-2006-4836
SQL injection vulnerability in login.php in DCP-Portal SE 6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: The lostpassword.php and calendar.php vectors are already covered by CVE-2005-3365, and the search.php vector is already covered by CVE-2005-42...
CVE-2006-4838
CVE-2006-4838 concerns multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal SE 6.0. The flaws allow remote attackers to inject arbitrary web script or HTML via request parameters in the admin interface: in footer.inc.php (root_url and dcp_version) and in header.inc.php (root_url, pag...
CVE-2006-4838
Multiple cross-site scripting XSS vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 rooturl and 2 dcpversion parameters in a admin/inc/footer.inc.php, and the rooturl, 3 pagetopname, 4 pagename, and 5 pageoptions parameters in b...
CVE-2006-4837
CVE-2006-4837 affects DCP-Portal SE 6.0. The issue is described as multiple PHP remote file inclusion vulnerabilities allowing an attacker to execute arbitrary PHP code via a URL in the root parameter of two scripts: library/lib.php and library/editor/editor.php. A related behavior can trigger fu...
CVE-2006-4836
CVE-2006-4836 affects DCP-Portal SE 6.0 via SQL injection in login.php (username parameter). Describes remote SQL execution risk and notes that lostpassword.php/calendar.php vectors are covered by CVE-2005-3365 and search.php by CVE-2005-4227. No explicit remediation or patch details are provided...
DCP-Portal 6.0 - adminincfooter.inc.php Multiple Cross-Site Scripting Vulnerabilities
DCP-Portal 6.0 - adminincfooter.inc.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/20024/info DCP-Portal is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues,...
DCP-Portal 6.0 - 'login.php?Username' SQL Injection
source: https://www.securityfocus.com/bid/20024/info DCP-Portal is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit of the...
DCP-Portal 6.0 - '/admin/inc/footer.inc.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/20024/info DCP-Portal is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit of the...
DCP-Portal 6.0 - adminincheader.inc.php Multiple Cross-Site Scripting Vulnerabilities
DCP-Portal 6.0 - adminincheader.inc.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/20024/info DCP-Portal is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues,...
DCP-Portal 6.0 - '/admin/inc/header.inc.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/20024/info DCP-Portal is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit of the...
DCP-Portal 6.0 - login.php?Username SQL Injection
DCP-Portal 6.0 - login.php?Username SQL Injection source: https://www.securityfocus.com/bid/20024/info DCP-Portal is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application fails to sanitiz...
[Kurdish Security # 8] DCP-Portal Remote File Include Vulnerability [Editor DHTML]
Kurdish Security Advisory irc.gigachat.net kurdhack http://www.milw0rm.com/exploits/1905 Editor DHTML Scripting bugz $urlpatheditor = "$rooturl/library/editor/"; $abspatheditor = "$root/library/editor/"; ? Proof Of Concept...
DCP-Portal 6.1.x - root Remote File Inclusion
DCP-Portal 6.1.x - root Remote File Inclusion ----------------------------------------------------- Advisory id: FSA:013 Author: Federico Fazzi Date: 12/06/2006, 9:31 Sinthesis: DCP-Portal 6.1.x, Remote command execution Type: high Product: http://www.dcp-portal.org/ Patch: unavailable...
f_dp-6.1.x.txt
----------------------------------------------------- Advisory id: FSA:013 Author: Federico Fazzi Date: 12/06/2006, 9:31 Sinthesis: DCP-Portal 6.1.x, Remote command execution Type: high Product: http://www.dcp-portal.org/ Patch: unavailable ----------------------------------------------------- 1...