QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2005-3365

Back to search

CVE-2005-3365

Published: Oct 29, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via (1) the name parameter in register.php, (2) the email parameter in lostpassword.php, (3) the year parameter in calendar.php, and the (4) cid parameter to index.php. NOTE: the mid parameter for forums.php is already associated with CVE-2005-0454. NOTE: the index.php/cid vector was later reported to affect 6.11.

VendorProductVersions

n/a

n/a

affected
n/a

References

20493
vdb-entry
x_refsource_OSVDB
108
third-party-advisory
x_refsource_SREASON
12751
third-party-advisory
x_refsource_SECUNIA
4853
exploit
x_refsource_EXPLOIT-DB
20494
vdb-entry
x_refsource_OSVDB
15183
vdb-entry
x_refsource_BID
20051024 DCP - portal XSS & SQL attacks
mailing-list
x_refsource_BUGTRAQ
27167
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now