CVE-2005-0454
published 2005-05-02CVE-2005-0454: Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the lcat, doc, or uid…
PriorityP335high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.55%
71.9th percentile
Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the lcat, doc, or uid parameters to index.php, or (2) the mid or bid parameters to forums.php.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| codeworx_technologies | dcp-portal | <= 6.1.1 | — |
| codeworx_technologies | dcp-portal | — | — |
| codeworx_technologies | dcp-portal | — | — |
| codeworx_technologies | dcp-portal | — | — |
| codeworx_technologies | dcp-portal | — | — |
| codeworx_technologies | dcp-portal | — | — |
| codeworx_technologies | dcp-portal | — | — |
| codeworx_technologies | dcp-portal | — | — |
| codeworx_technologies | dcp-portal | — | — |
| codeworx_technologies | dcp-portal | — | — |
| codeworx_technologies | dcp-portal | — | — |
| codeworx_technologies | dcp-portal | — | — |
| codeworx_technologies | dcp-portal | — | — |
| codeworx_technologies | dcp-portal | — | — |
| codeworx_technologies | dcp-portal | — | — |
| codeworx_technologies | dcp-portal | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-h95c-vg5w-xg77: Multiple SQL injection vulnerabilities in DCP-Portal 6
ghsa_unreviewed·2022-05-01
CVE-2005-0454 [HIGH] GHSA-h95c-vg5w-xg77: Multiple SQL injection vulnerabilities in DCP-Portal 6
Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the lcat, doc, or uid parameters to index.php, or (2) the mid or bid parameters to forums.php.
GHSA
GHSA-97m8-rj8m-hvm2: Multiple "potential" SQL injection vulnerabilities in DCP-Portal 6
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2005-4227 [HIGH] GHSA-97m8-rj8m-hvm2: Multiple "potential" SQL injection vulnerabilities in DCP-Portal 6
Multiple "potential" SQL injection vulnerabilities in DCP-Portal 6.1.1 might allow remote attackers to execute arbitrary SQL commands via (1) the password and username parameters in advertiser.php, (2) the aid parameter in announcement.php, (3) the dcp5_member_id, year, agid, day, day_s, hour, minute, month, month_s, and year_s parameters in calendar.php, (4) the cid parameter in contents.php, (5) the dcp5_member_id parameter in forums.php, (6) the bid parameter in go.php, (7) the lid parameter in golink.php, (8) the dcp5_member_id and mid parameters in inbox.php, (9) the catid, dcat, and dl parameters in index.php, (10) the dcp5_member_id in informer.php, (11) the nid parameter in news.php, (12) the type and rate parameters in rate.php, (13) the q parameter in search.php, and (14) the dcp
GHSA
GHSA-w22h-xhrm-8cw5: Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encode
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2005-3365 [HIGH] CWE-89 GHSA-w22h-xhrm-8cw5: Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encode
Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via (1) the name parameter in register.php, (2) the email parameter in lostpassword.php, (3) the year parameter in calendar.php, and the (4) cid parameter to index.php. NOTE: the mid parameter for forums.php is already associated with CVE-2005-0454. NOTE: the index.php/cid vector was later reported to affect 6.11.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://glide.stanford.edu/yichen/research/sec.pdfhttp://marc.info/?l=bugtraq&m=110858497207809&w=2http://securityreason.com/securityalert/108http://securitytracker.com/id?1013216http://www.hackgen.org/advisories/hackgen-2005-003.txthttp://www.securityfocus.com/archive/1/419280/100/0/threadedhttp://www.securityfocus.com/bid/12573https://exchange.xforce.ibmcloud.com/vulnerabilities/19361http://glide.stanford.edu/yichen/research/sec.pdfhttp://marc.info/?l=bugtraq&m=110858497207809&w=2http://securityreason.com/securityalert/108http://securitytracker.com/id?1013216http://www.hackgen.org/advisories/hackgen-2005-003.txthttp://www.securityfocus.com/archive/1/419280/100/0/threadedhttp://www.securityfocus.com/bid/12573https://exchange.xforce.ibmcloud.com/vulnerabilities/19361
2005-05-02
Published