Dcp Portal
Approved changes feed: RSS · Atom
cpe:2.3:a:codeworx_technologies:dcp-portal:6.0:*:*:*:*:*:*:*part: a version: 6.0 update: *
| Vendor | Codeworx Technologies (b87ef982-59ce-558f-80ae-fe46c56f3b04) |
|---|---|
| Product | Dcp Portal (ed80ef3c-1477-54ca-9c00-9587a82e7e4e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/jangocheng/dcp-portal |
purl2cpe | 2026-06-01 10:11:15.001285 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-0220 |
vulnerable | 2026-06-08 04:48:53.131725 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3 through 6.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the day parameter in calendar.php and (2) the input form in search.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. It is possible that this issue is resultant from an SQL injection problem in CVE-2005-4227.3 and CVE-2005-4227.13.
Published: 2006-01-16T21:00:00.000Z
Updated: 2024-08-07T16:25:33.896Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4227 |
vulnerable | 2026-06-08 04:48:43.283366 |
Details available
Multiple "potential" SQL injection vulnerabilities in DCP-Portal 6.1.1 might allow remote attackers to execute arbitrary SQL commands via (1) the password and username parameters in advertiser.php, (2) the aid parameter in announcement.php, (3) the dcp5_member_id, year, agid, day, day_s, hour, minute, month, month_s, and year_s parameters in calendar.php, (4) the cid parameter in contents.php, (5) the dcp5_member_id parameter in forums.php, (6) the bid parameter in go.php, (7) the lid parameter in golink.php, (8) the dcp5_member_id and mid parameters in inbox.php, (9) the catid, dcat, and dl parameters in index.php, (10) the dcp5_member_id in informer.php, (11) the nid parameter in news.php, (12) the type and rate parameters in rate.php, (13) the q parameter in search.php, and (14) the dcp5_member_id in update.php. NOTE: other vectors in the PHP-CHECKER report are also covered by CVE-2005-3365 and CVE-2005-0454.
Published: 2005-12-14T11:00:00.000Z
Updated: 2024-08-07T23:38:51.601Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3365 |
vulnerable | 2026-06-08 04:48:40.508448 |
Details available
Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via (1) the name parameter in register.php, (2) the email parameter in lostpassword.php, (3) the year parameter in calendar.php, and the (4) cid parameter to index.php. NOTE: the mid parameter for forums.php is already associated with CVE-2005-0454. NOTE: the index.php/cid vector was later reported to affect 6.11.
Published: 2005-10-29T19:00:00.000Z
Updated: 2024-08-07T23:10:08.589Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.