Approved changes feed: RSS · Atom

cpe:2.3:a:codeworx_technologies:dcp-portal:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodeworx Technologies (b87ef982-59ce-558f-80ae-fe46c56f3b04)
ProductDcp Portal (ed80ef3c-1477-54ca-9c00-9587a82e7e4e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jangocheng/dcp-portal purl2cpe 2026-06-01 10:11:14.988798

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-0454 vulnerable 2026-06-08 04:48:12.686774 Details available
Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the lcat, doc, or uid parameters to index.php, or (2) the mid or bid parameters to forums.php.
Published: 2005-02-16T05:00:00.000Z
Updated: 2024-08-07T21:13:54.224Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2512 vulnerable 2026-06-08 04:48:09.984267 Details available
CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the PHPSESSID parameter.
Published: 2005-10-25T04:00:00.000Z
Updated: 2024-08-08T01:29:13.719Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2511 vulnerable 2026-06-08 04:48:09.977197 Details available
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the year, (2) month, and (3) day parameters in calendar.php; (4) the cid and (5) url parameters in index.php; (6) the cid parameter in annoucement.php; (7) the cid parameter in news.php; (8) the cid parameter in contents.php; (9) the q parameter in search.php; and (10) the country parameter in register.php.
Published: 2005-10-25T04:00:00.000Z
Updated: 2024-08-08T01:29:13.772Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.