CVE-2005-0454: Undefined Security Weakness

Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the lcat, doc, or uid parameters to index.php, or 2 the mid or bid parameters to forums.php...