NVD

Id
69027  
Name
CVE-2005-3365  
Description
Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via (1) the name parameter in register.php, (2) the email parameter in lostpassword.php, (3) the year parameter in calendar.php, and the (4) cid parameter to index.php. NOTE: the mid parameter for forums.php is already associated with CVE-2005-0454. NOTE: the index.php/cid vector was later reported to affect 6.11.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-10-30  
Modified Date
2017-07-10  
Seq
2005-3365  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
356848 69027 CVE-2005-3365 http://glide.stanford.edu/yichen/research/sec.pdf  View
356849 69027 CVE-2005-3365 20051024 DCP - portal XSS & SQL attacks  View
356850 69027 CVE-2005-3365 108  View
356851 69027 CVE-2005-3365 4853  View
356852 69027 CVE-2005-3365 20051211 [PHP-CHECKER] 99 potential SQL injection vulnerabilities  View
356853 69027 CVE-2005-3365 15183  View
356854 69027 CVE-2005-3365 27167  View
356855 69027 CVE-2005-3365 dcpportal-multiple-php-sql-injection(22855)  View
356856 69027 CVE-2005-3365 dcpportal-index-sql-injection(39447)  View

Related JVN