codeworx technologies dcp-portal 3.7 vulnerabilities and exploits

(subscribe to this query)

DCP-Portal 3.7 up to and including 4.5 allows remote malicious users to obtain the physical path of the server via (1) a direct request to add_user.php, or via an invalid new_language parameter in (2) contents.php, (3) categories.php, or (4) files.php, which leaks the path in an ...

Codeworx Technologies Dcp-portal 4.5 Codeworx Technologies Dcp-portal 4.1 Codeworx Technologies Dcp-portal 4.2 Codeworx Technologies Dcp-portal 3.7 Codeworx Technologies Dcp-portal 4.0

CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and previous versions allows remote malicious users to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the PHPSESSID parameter.

Codeworx Technologies Dcp-portal 5.0.2 Codeworx Technologies Dcp-portal 5.1 Codeworx Technologies Dcp-portal 3.7 Codeworx Technologies Dcp-portal 4.0 Codeworx Technologies Dcp-portal 4.1 Codeworx Technologies Dcp-portal 4.2 Codeworx Technologies Dcp-portal 5.3.1 Codeworx Technologies Dcp-portal Codeworx Technologies Dcp-portal 5.2 Codeworx Technologies Dcp-portal 5.3 Codeworx Technologies Dcp-portal 4.5.1 Codeworx Technologies Dcp-portal 5.0.1

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and previous versions allow remote malicious users to inject arbitrary web script or HTML via (1) the year, (2) month, and (3) day parameters in calendar.php; (4) the cid and (5) url parameters in index.php; ...

Codeworx Technologies Dcp-portal 5.0.2 Codeworx Technologies Dcp-portal 4.1 Codeworx Technologies Dcp-portal 4.2 Codeworx Technologies Dcp-portal Codeworx Technologies Dcp-portal 4.5.1 Codeworx Technologies Dcp-portal 5.0.1 Codeworx Technologies Dcp-portal 5.1 Codeworx Technologies Dcp-portal 5.2 Codeworx Technologies Dcp-portal 3.7 Codeworx Technologies Dcp-portal 4.0 Codeworx Technologies Dcp-portal 5.3 Codeworx Technologies Dcp-portal 5.3.1

3 EDB exploits

Cross-site scripting vulnerability in DCP-Portal 4.2 and previous versions allows remote malicious users to gain privileges of other portal users by providing Javascript in the job information field to user_update.php.

Codeworx Technologies Dcp-portal 4.2 Codeworx Technologies Dcp-portal 4.0 Codeworx Technologies Dcp-portal 4.1 Codeworx Technologies Dcp-portal 3.7

Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and previous versions, with register_globals enabled, allow remote malicious users to inject arbitrary web script or HTML via the (1) its_url parameter in the documents page and (2) url parameter in the send_...

Codeworx Technologies Dcp-portal 5.0.1 Codeworx Technologies Dcp-portal 5.0.2 Codeworx Technologies Dcp-portal 3.7 Codeworx Technologies Dcp-portal 5.1 Codeworx Technologies Dcp-portal 5.2 Codeworx Technologies Dcp-portal 4.0 Codeworx Technologies Dcp-portal 4.1 Codeworx Technologies Dcp-portal 5.3 Codeworx Technologies Dcp-portal 5.3.1 Codeworx Technologies Dcp-portal 5.3.2 Codeworx Technologies Dcp-portal 4.2 Codeworx Technologies Dcp-portal 4.5.1 Codeworx Technologies Dcp-portal 6.1.1

6 EDB exploits

Multiple "potential" SQL injection vulnerabilities in DCP-Portal 6.1.1 might allow remote malicious users to execute arbitrary SQL commands via (1) the password and username parameters in advertiser.php, (2) the aid parameter in announcement.php, (3) the dcp5_member_id,...

Codeworx Technologies Dcp-portal 4.0 Codeworx Technologies Dcp-portal 4.1 Codeworx Technologies Dcp-portal 5.3 Codeworx Technologies Dcp-portal 5.3.1 Codeworx Technologies Dcp-portal 4.2 Codeworx Technologies Dcp-portal 4.5.1 Codeworx Technologies Dcp-portal 5.3.2 Codeworx Technologies Dcp-portal 6.0 Codeworx Technologies Dcp-portal 3.7 Codeworx Technologies Dcp-portal 5.1 Codeworx Technologies Dcp-portal 5.2 Codeworx Technologies Dcp-portal 5.0.1 Codeworx Technologies Dcp-portal 5.0.2 Codeworx Technologies Dcp-portal 6.1 Codeworx Technologies Dcp-portal 6.1.1

Multiple SQL injection vulnerabilities in DCP-Portal 6 and previous versions allow remote malicious users to execute arbitrary SQL commands, possibly requiring encoded characters, via (1) the name parameter in register.php, (2) the email parameter in lostpassword.php, (3) the yea...

Codeworx Technologies Dcp-portal 4.2 Codeworx Technologies Dcp-portal 4.5.1 Codeworx Technologies Dcp-portal 5.3.2 Codeworx Technologies Dcp-portal 6.0 Codeworx Technologies Dcp-portal 5.0.1 Codeworx Technologies Dcp-portal 5.0.2 Codeworx Technologies Dcp-portal 3.7 Codeworx Technologies Dcp-portal 5.1 Codeworx Technologies Dcp-portal 5.2 Codeworx Technologies Dcp-portal 4.0 Codeworx Technologies Dcp-portal 4.1 Codeworx Technologies Dcp-portal 5.3 Codeworx Technologies Dcp-portal 5.3.1

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook