CVE-2006-0220

Multiple cross-site scripting XSS vulnerabilities in DCP-Portal 5.3 through 6.1.1 allow remote attackers to inject arbitrary web script or HTML via 1 the day parameter in calendar.php and 2 the input form in search.php. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2006-0220

Multiple cross-site scripting XSS vulnerabilities in DCP-Portal 5.3 through 6.1.1 allow remote attackers to inject arbitrary web script or HTML via 1 the day parameter in calendar.php and 2 the input form in search.php. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2006-0220

CVE-2006-0220 is an XSS vulnerability in DCP-Portal (versions 5.3–6.1.1). The issue allows remote attackers to inject arbitrary script via the day parameter in calendar.php and via the input form in search.php. Details are corroborated by multiple sources (PRION entries and CVE records) noting th...

DCP Portal Cross-Site Scripting Vulnerability

NightWarriorKurdish Hacker nightwarrior771athotmail.com DCP Portal Cross-Site Scripting Vulnerability http://www.dcp-portal.org http://vicktimhost/calendar.php?show=fullmonth&s=1&submit=GO&day=XSS http://vicktimhost/search.php post this code scriptalert'nightwarrior';/script...

DCP Portal 5.3/6.0/6.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/16232/info DCP Portal is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. For the cross-site scripting vulnerability, an attacker may leverage these issues t...

DCP Portal 5.36.06.1 - Multiple Input Validation Vulnerabilities

DCP Portal 5.36.06.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/16232/info DCP Portal is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. For the cross-site...

CVE-2005-4227

Multiple "potential" SQL injection vulnerabilities in DCP-Portal 6.1.1 might allow remote attackers to execute arbitrary SQL commands via 1 the password and username parameters in advertiser.php, 2 the aid parameter in announcement.php, 3 the dcp5memberid, year, agid, day, days, hour, minute,...

CVE-2005-4227

Multiple "potential" SQL injection vulnerabilities in DCP-Portal 6.1.1 might allow remote attackers to execute arbitrary SQL commands via 1 the password and username parameters in advertiser.php, 2 the aid parameter in announcement.php, 3 the dcp5memberid, year, agid, day, days, hour, minute,...

CVE-2005-4227

CVE-2005-4227 affects DCP-Portal 6.1.1 with multiple potential SQL injection vectors. The vulnerability list covers parameters in advertiser.php, announcement.php, calendar.php, contents.php, forums.php, go.php, golink.php, inbox.php, index.php, informer.php, news.php, rate.php, search.php, and u...

[PHP-CHECKER] 99 potential SQL injection vulnerabilities

Hi, we are a group of Stanford researchers and we have recently developed an automated tool for detecting injection vulnerabilities in PHP. We ran our tool on the following list of software and found 99 potential security vulnerabilites inspected bug reports attached below: e107 -- v0.7 myBloggie...

DCP-Portal <= 5.3.2 Multiple Vulnerabilities - Active Check

DCP-Portal is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2003 k-otik.com SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2005-3365

Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via 1 the name parameter in register.php, 2 the email parameter in lostpassword.php, 3 the year parameter in calendar.php, and the 4...

CVE-2005-3365

CVE-2005-3365 describes multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier. The affected software is DCP-Portal (versions 6 and earlier). The vulnerabilities allow remote attackers to execute arbitrary SQL commands via multiple input parameters, specifically: name in register.php,...

CVE-2005-3365

Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via 1 the name parameter in register.php, 2 the email parameter in lostpassword.php, 3 the year parameter in calendar.php, and the 4...

CVE-2004-2512

CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF "%0d%0a" sequences in the PHPSESSID parameter...

CVE-2004-2512

CVE-2004-2512 affects DCP-Portal 5.3.2 and earlier. It is a CRLF injection/vulnerability in calendar.php that enables HTTP response splitting via CRLF (%0d%0a) sequences in the PHPSESSID parameter, allowing spoofing of web content and potential cache poisoning. The provided documents confirm the ...

CVE-2004-2511

Multiple cross-site scripting XSS vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the year, 2 month, and 3 day parameters in calendar.php; 4 the cid and 5 url parameters in index.php; 6 the cid parameter in annoucement.php; 7 the...

CVE-2004-2511

CVE-2004-2511 affects DCP-Portal 5.3.2 and earlier. The issue is multiple XSS vectors in calendar.php, index.php, annou ncement.php, news.php, contents.php, search.php, and register.php via various parameters (year/month/day, cid, url, q, country, etc.). Root cause: insufficient input sanitizatio...

CVE-2005-0454

Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the lcat, doc, or uid parameters to index.php, or 2 the mid or bid parameters to forums.php...

Hackgen Security Advisory 2005.3

http://www.hackgen.org/advisories/hackgen-2005-003.txt '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' hackgen-2005-003 ' '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' SQL injection bugs in DCP-Portal '...