Approved changes feed: RSS · Atom

cpe:2.3:a:duware:duportal_pro:3.4.3:*:*:*:*:*:*:*

part: a version: 3.4.3 update: *

VendorDuware (a7e4dbbd-0fa1-58a2-ad48-648c67f14a28)
ProductDuportal Pro (5a59ca50-9015-5cac-bc1c-6958501f0e4a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4166 not_vulnerable 2026-06-03 14:27:12.351597 Details available
Cross-site scripting (XSS) vulnerability in password.asp in DUWare DUportal Pro 3.4.3 allows remote attackers to inject arbitrary web script or HTML via the result parameter.
Published: 2005-12-11T21:00:00.000Z
Updated: 2024-08-07T23:38:51.222Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2045 vulnerable 2026-06-03 14:27:00.913835 Details available
Multiple SQL injection vulnerabilities in DUware DUportal PRO 3.4.3 allow remote attackers to execute arbitrary SQL commands via the (1) iChannel parameter to default.asp, (2) iData parameter to detail.asp, (3) iMem parameter to members.asp, (4) iCat parameter to cat.asp, (5) offset parameter to members_listing_approval.asp, or (6) iChannel parameter to channels_edit.asp.
Published: 2005-06-22T04:00:00.000Z
Updated: 2024-08-07T22:15:36.774Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.