CVE-2005-0454

Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the lcat, doc, or uid parameters to index.php, or 2 the mid or bid parameters to forums.php...

CVE-2005-0454

Vulnerability summary (CVE-2005-0454) : DCP-Port al 6.1.1 and earlier contain multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands. The issues are triggered via (1) index.php parameters lcat, doc, or uid, and (2) forums.php parameters mid or bid. The connecte...

DCP-Portal 6.1.1 - Multiple SQL Injections

DCP-Portal 6.1.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/12573/info DCP-Portal is reportedly affected by multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using it in SQL queries...

DCP-Portal < 6.1.2 Multiple SQL Injection

Binary data 2625.prm...

[hackgen-2005-#003] - SQL injection bugs in DCP-Portal

http://www.hackgen.org/advisories/hackgen-2005-003.txt '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' hackgen-2005-003 ' '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' SQL injection bugs in DCP-Portal '...

DCP-Portal 6.1.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/12573/info DCP-Portal is reportedly affected by multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a...

DCP-Portal Multiple Scripts SQL Injection

The remote host is running DCP-Portal, a content management system powered by PHP. The version of DCP-Portal installed on the remote host fails to sanitize user-supplied input to many of its parameters before using it, either in database queries or dynamic web page generation. An attacker may be...

CVE-2004-2512

CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF "%0d%0a" sequences in the PHPSESSID parameter...

CVE-2004-2511

Multiple cross-site scripting XSS vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the year, 2 month, and 3 day parameters in calendar.php; 4 the cid and 5 url parameters in index.php; 6 the cid parameter in annoucement.php; 7 the...

[Full-Disclosure] [Maxpatrol Security Advisory] Multiple vulnerabilities in DCP-Portal

Title: Maxpatrol Security Advisory Multiple vulnerabilities in DCP-Portal Date: 28.09.2004 Severity: Low Application: DCP-Portal, dcp-portal Platform: PHP I. DESCRIPTION -------------- Multiple vulnerabilities were found in DCP-Portal. A remote user can conduct cross-site scripting attacks and HT...

DCP-Portal 3.74.x5.x - news.php?cid Cross-Site Scripting

DCP-Portal 3.74.x5.x - news.php?cid Cross-Site Scripting source: https://www.securityfocus.com/bid/11338/info DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several scripts...

DCP-Portal < 6.1 Multiple Vulnerabilities

Binary data 2355.prm...

DCP-Portal 3.74.x5.x - calendar.php Multiple Cross-Site Scripting Vulnerabilities

DCP-Portal 3.74.x5.x - calendar.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/11338/info DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied...

DCP-Portal 3.74.x5.x - contents.php?cid Cross-Site Scripting

DCP-Portal 3.74.x5.x - contents.php?cid Cross-Site Scripting source: https://www.securityfocus.com/bid/11338/info DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several scripts...

DCP-Portal 3.74.x5.x - Multiple HTML Injection Vulnerabilities

DCP-Portal 3.74.x5.x - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/11339/info DCP-Portal is reported prone to multiple HTML injection vulnerabilities. It is reported that DCP-Portal does not sufficiently filter data submitted via input fields in several...

DCP-Portal 3.74.x5.x - announcement.php?cid Cross-Site Scripting

DCP-Portal 3.74.x5.x - announcement.php?cid Cross-Site Scripting source: https://www.securityfocus.com/bid/11338/info DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several...

DCP-Portal 3.74.x5.x - index.php Multiple Cross-Site Scripting Vulnerabilities

DCP-Portal 3.74.x5.x - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/11338/info DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to...

DCP-Portal 3.7/4.x/5.x - 'announcement.php?cid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11338/info DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several scripts. Because of this deficiency, it is possible for a remote...

DCP-Portal 3.7/4.x/5.x - 'contents.php?cid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11338/info DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several scripts. Because of this deficiency, it is possible for a remote...

DCP-Portal 3.7/4.x/5.x - 'news.php?cid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11338/info DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several scripts. Because of this deficiency, it is possible for a remote...