Data Center Audit
Approved changes feed: RSS · Atom
cpe:2.3:a:sourceforge:data_center_audit:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sourceforge (f6f3b515-d441-5dd2-b323-a578719a1725) |
|---|---|
| Product | Data Center Audit (5913f1a7-3a16-5dcc-b210-cd360db66961) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-25189 |
vulnerable | 2026-06-03 14:38:41.119363 |
Data Center Audit 2.6.2 SQL Injection via username Parameter
HIGH (8.2)
Data Center Audit 2.6.2 contains an SQL injection vulnerability in the username parameter of dca_login.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can submit crafted SQL payloads through POST requests to extract sensitive database information including usernames, database names, and version details.
Published: 2026-03-06T12:19:15.158Z
Updated: 2026-03-09T18:59:34.755Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-25177 |
vulnerable | 2026-06-03 14:38:41.096587 |
Data Center Audit 2.6.2 Cross-Site Request Forgery via dca_resetpw.php
MEDIUM (5.3)
Data Center Audit 2.6.2 contains a cross-site request forgery vulnerability that allows attackers to reset administrator passwords without authentication by submitting crafted POST requests. Attackers can send requests to dca_resetpw.php with parameters updateuser, pass, pass2, and submit_reset to change the admin account password and gain administrative access.
Published: 2026-03-06T12:19:07.336Z
Updated: 2026-03-09T15:24:21.368Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.