Lucene search

[email protected]CVE-2005-3365

HistoryOct 30, 2005 - 2:34 p.m.

CVE-2005-3365

2005-10-3014:34:00

CWE-89

[email protected]

web.nvd.nist.gov

sql injection

dcp-portal

remote attackers

security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.3%

JSON

Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via (1) the name parameter in register.php, (2) the email parameter in lostpassword.php, (3) the year parameter in calendar.php, and the (4) cid parameter to index.php. NOTE: the mid parameter for forums.php is already associated with CVE-2005-0454. NOTE: the index.php/cid vector was later reported to affect 6.11.

Affected configurations

NVD

Node

codeworx_technologiesdcp-portalMatch3.7

codeworx_technologiesdcp-portalMatch4.0

codeworx_technologiesdcp-portalMatch4.1

codeworx_technologiesdcp-portalMatch4.2

codeworx_technologiesdcp-portalMatch4.5.1

codeworx_technologiesdcp-portalMatch5.0.1

codeworx_technologiesdcp-portalMatch5.0.2

codeworx_technologiesdcp-portalMatch5.1

codeworx_technologiesdcp-portalMatch5.2

codeworx_technologiesdcp-portalMatch5.3

codeworx_technologiesdcp-portalMatch5.3.1

codeworx_technologiesdcp-portalMatch5.3.2

codeworx_technologiesdcp-portalMatch6.0

CPENameOperatorVersion
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq3.7
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq4.0
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq4.1
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq4.2
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq4.5.1
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.0.1
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.0.2
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.1
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.2
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.3

CPE	Name	Operator	Version
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	3.7
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	4.0
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	4.1
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	4.2
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	4.5.1
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.0.1
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.0.2
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.1
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.2
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.3

Rows per page:

1-10 of 131

References

glide.stanford.edu/yichen/research/sec.pdf

marc.info/?l=bugtraq&m=113017151829342&w=2

secunia.com/advisories/12751/

securityreason.com/securityalert/108

www.osvdb.org/20493

www.osvdb.org/20494

www.securityfocus.com/archive/1/419280/100/0/threaded

www.securityfocus.com/bid/15183

www.securityfocus.com/bid/27167

exchange.xforce.ibmcloud.com/vulnerabilities/22855

exchange.xforce.ibmcloud.com/vulnerabilities/39447

www.exploit-db.com/exploits/4853

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.3%

JSON

Related for CVE-2005-3365

nvd4 cvelist4 cve3 nessus1