CVE

Id
11660  
CVE No.
CVE-2005-0454  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the lcat, doc, or uid parameters to index.php, or (2) the mid or bid parameters to forums.php.  
Phase
Assigned (20050216)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
83423 11660 CVE-2005-0454 BUGTRAQ:20050216 [hackgen-2005-#003] - SQL injection bugs in DCP-Portal  View
83424 11660 CVE-2005-0454 URL:http://marc.info/?l=bugtraq&m=110858497207809&w=2  View
83425 11660 CVE-2005-0454 MISC:http://www.hackgen.org/advisories/hackgen-2005-003.txt  View
83426 11660 CVE-2005-0454 BUGTRAQ:20051211 [PHP-CHECKER] 99 potential SQL injection vulnerabilities  View
83427 11660 CVE-2005-0454 URL:http://www.securityfocus.com/archive/1/archive/1/419280/100/0/threaded  View
83428 11660 CVE-2005-0454 MISC:http://glide.stanford.edu/yichen/research/sec.pdf  View
83429 11660 CVE-2005-0454 BID:12573  View
83430 11660 CVE-2005-0454 URL:http://www.securityfocus.com/bid/12573  View
83431 11660 CVE-2005-0454 SECTRACK:1013216  View
83432 11660 CVE-2005-0454 URL:http://securitytracker.com/id?1013216  View
83433 11660 CVE-2005-0454 SREASON:108  View
83434 11660 CVE-2005-0454 URL:http://securityreason.com/securityalert/108  View
83435 11660 CVE-2005-0454 XF:dcpportal-multiple-sql-injection(19361)  View

Related JVN