CVE-2005-3365 (GCVE-0-2005-3365)
Vulnerability from cvelistv5 – Published: 2005-10-29 19:00 – Updated: 2024-08-07 23:10
VLAI?
Summary
Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via (1) the name parameter in register.php, (2) the email parameter in lostpassword.php, (3) the year parameter in calendar.php, and the (4) cid parameter to index.php. NOTE: the mid parameter for forums.php is already associated with CVE-2005-0454. NOTE: the index.php/cid vector was later reported to affect 6.11.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | |||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T23:10:08.589Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20493",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/20493"
},
{
"name": "20051211 [PHP-CHECKER] 99 potential SQL injection vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/419280/100/0/threaded"
},
{
"name": "108",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/108"
},
{
"name": "12751",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/12751/"
},
{
"name": "4853",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/4853"
},
{
"name": "20494",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/20494"
},
{
"name": "15183",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/15183"
},
{
"name": "dcpportal-multiple-php-sql-injection(22855)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22855"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://glide.stanford.edu/yichen/research/sec.pdf"
},
{
"name": "20051024 DCP - portal XSS \u0026 SQL attacks",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://marc.info/?l=bugtraq\u0026m=113017151829342\u0026w=2"
},
{
"name": "dcpportal-index-sql-injection(39447)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39447"
},
{
"name": "27167",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/27167"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-10-24T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via (1) the name parameter in register.php, (2) the email parameter in lostpassword.php, (3) the year parameter in calendar.php, and the (4) cid parameter to index.php. NOTE: the mid parameter for forums.php is already associated with CVE-2005-0454. NOTE: the index.php/cid vector was later reported to affect 6.11."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "20493",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/20493"
},
{
"name": "20051211 [PHP-CHECKER] 99 potential SQL injection vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/419280/100/0/threaded"
},
{
"name": "108",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/108"
},
{
"name": "12751",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/12751/"
},
{
"name": "4853",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/4853"
},
{
"name": "20494",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/20494"
},
{
"name": "15183",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/15183"
},
{
"name": "dcpportal-multiple-php-sql-injection(22855)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22855"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://glide.stanford.edu/yichen/research/sec.pdf"
},
{
"name": "20051024 DCP - portal XSS \u0026 SQL attacks",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://marc.info/?l=bugtraq\u0026m=113017151829342\u0026w=2"
},
{
"name": "dcpportal-index-sql-injection(39447)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39447"
},
{
"name": "27167",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/27167"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-3365",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via (1) the name parameter in register.php, (2) the email parameter in lostpassword.php, (3) the year parameter in calendar.php, and the (4) cid parameter to index.php. NOTE: the mid parameter for forums.php is already associated with CVE-2005-0454. NOTE: the index.php/cid vector was later reported to affect 6.11."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20493",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/20493"
},
{
"name": "20051211 [PHP-CHECKER] 99 potential SQL injection vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/419280/100/0/threaded"
},
{
"name": "108",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/108"
},
{
"name": "12751",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/12751/"
},
{
"name": "4853",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/4853"
},
{
"name": "20494",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/20494"
},
{
"name": "15183",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/15183"
},
{
"name": "dcpportal-multiple-php-sql-injection(22855)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22855"
},
{
"name": "http://glide.stanford.edu/yichen/research/sec.pdf",
"refsource": "MISC",
"url": "http://glide.stanford.edu/yichen/research/sec.pdf"
},
{
"name": "20051024 DCP - portal XSS \u0026 SQL attacks",
"refsource": "BUGTRAQ",
"url": "http://marc.info/?l=bugtraq\u0026m=113017151829342\u0026w=2"
},
{
"name": "dcpportal-index-sql-injection(39447)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39447"
},
{
"name": "27167",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/27167"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-3365",
"datePublished": "2005-10-29T19:00:00",
"dateReserved": "2005-10-29T00:00:00",
"dateUpdated": "2024-08-07T23:10:08.589Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codeworx_technologies:dcp-portal:3.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BE39E96D-B870-49FB-8C7C-7E829BA916B4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codeworx_technologies:dcp-portal:4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9C0D7706-EEB2-4898-A0EA-7BD198965E73\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codeworx_technologies:dcp-portal:4.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"356E5CEC-CCBD-4438-992A-29B53F3F6A7D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codeworx_technologies:dcp-portal:4.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"389B778A-EB0A-4BEC-9023-2190BCDAB746\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codeworx_technologies:dcp-portal:4.5.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D27F4000-ED33-48F9-92BA-2629C5BAD709\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AE7A0D86-BA93-4889-9242-A535C8F53E3E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"57026D15-982E-4816-A4CB-960852D7006F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codeworx_technologies:dcp-portal:5.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"79713BBA-FC4F-4445-B888-656A4DF6C2B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codeworx_technologies:dcp-portal:5.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CE1D9D8F-FD72-4B51-817A-7A807750D3B8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codeworx_technologies:dcp-portal:5.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"156DC7CD-FFEA-4225-BE58-6DEFEDCB1730\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codeworx_technologies:dcp-portal:5.3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"92241B71-C6B6-4B85-96A8-726CC04E3F4A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codeworx_technologies:dcp-portal:5.3.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5F26F19B-4F47-475E-AD58-D8964C0BF8E5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:codeworx_technologies:dcp-portal:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0E7F57E2-E38E-4575-8C95-5E2FAC7D919D\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via (1) the name parameter in register.php, (2) the email parameter in lostpassword.php, (3) the year parameter in calendar.php, and the (4) cid parameter to index.php. NOTE: the mid parameter for forums.php is already associated with CVE-2005-0454. NOTE: the index.php/cid vector was later reported to affect 6.11.\"}]",
"id": "CVE-2005-3365",
"lastModified": "2024-11-21T00:01:43.133",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 7.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": true, \"userInteractionRequired\": false}]}",
"published": "2005-10-30T14:34:00.000",
"references": "[{\"url\": \"http://glide.stanford.edu/yichen/research/sec.pdf\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=113017151829342\u0026w=2\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/12751/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\", \"Vendor Advisory\"]}, {\"url\": \"http://securityreason.com/securityalert/108\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/20493\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.osvdb.org/20494\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/archive/1/419280/100/0/threaded\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/bid/15183\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://www.securityfocus.com/bid/27167\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/22855\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/39447\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://www.exploit-db.com/exploits/4853\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://glide.stanford.edu/yichen/research/sec.pdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=113017151829342\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/12751/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Vendor Advisory\"]}, {\"url\": \"http://securityreason.com/securityalert/108\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/20493\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/20494\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/archive/1/419280/100/0/threaded\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/15183\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\"]}, {\"url\": \"http://www.securityfocus.com/bid/27167\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/22855\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/39447\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.exploit-db.com/exploits/4853\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-89\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2005-3365\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2005-10-30T14:34:00.000\",\"lastModified\":\"2025-04-03T01:03:51.193\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via (1) the name parameter in register.php, (2) the email parameter in lostpassword.php, (3) the year parameter in calendar.php, and the (4) cid parameter to index.php. NOTE: the mid parameter for forums.php is already associated with CVE-2005-0454. NOTE: the index.php/cid vector was later reported to affect 6.11.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":true,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-89\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codeworx_technologies:dcp-portal:3.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE39E96D-B870-49FB-8C7C-7E829BA916B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codeworx_technologies:dcp-portal:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C0D7706-EEB2-4898-A0EA-7BD198965E73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codeworx_technologies:dcp-portal:4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"356E5CEC-CCBD-4438-992A-29B53F3F6A7D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codeworx_technologies:dcp-portal:4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"389B778A-EB0A-4BEC-9023-2190BCDAB746\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codeworx_technologies:dcp-portal:4.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D27F4000-ED33-48F9-92BA-2629C5BAD709\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE7A0D86-BA93-4889-9242-A535C8F53E3E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"57026D15-982E-4816-A4CB-960852D7006F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codeworx_technologies:dcp-portal:5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"79713BBA-FC4F-4445-B888-656A4DF6C2B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codeworx_technologies:dcp-portal:5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE1D9D8F-FD72-4B51-817A-7A807750D3B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codeworx_technologies:dcp-portal:5.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"156DC7CD-FFEA-4225-BE58-6DEFEDCB1730\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codeworx_technologies:dcp-portal:5.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"92241B71-C6B6-4B85-96A8-726CC04E3F4A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codeworx_technologies:dcp-portal:5.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F26F19B-4F47-475E-AD58-D8964C0BF8E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codeworx_technologies:dcp-portal:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E7F57E2-E38E-4575-8C95-5E2FAC7D919D\"}]}]}],\"references\":[{\"url\":\"http://glide.stanford.edu/yichen/research/sec.pdf\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=113017151829342\u0026w=2\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/12751/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]},{\"url\":\"http://securityreason.com/securityalert/108\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/20493\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/20494\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/archive/1/419280/100/0/threaded\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/15183\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\"]},{\"url\":\"http://www.securityfocus.com/bid/27167\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/22855\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/39447\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.exploit-db.com/exploits/4853\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://glide.stanford.edu/yichen/research/sec.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=113017151829342\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/12751/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]},{\"url\":\"http://securityreason.com/securityalert/108\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/20493\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/20494\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/419280/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/15183\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\"]},{\"url\":\"http://www.securityfocus.com/bid/27167\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/22855\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/39447\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.exploit-db.com/exploits/4853\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…