Codeworx Technologies

12 CVEs across 1 Codeworx Technologies products. Browse Codeworx Technologies vulnerabilities, severities, and proof-of-concept exploits.

Codeworx Technologies products with known CVEs

ProductCVEs
Dcp-Portal12
Codeworx Technologies CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2006-48382006-09-15Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) root_url and…
CVE-2006-48372006-09-15Multiple PHP remote file inclusion vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in…
CVE-2006-48362006-09-15SQL injection vulnerability in login.php in DCP-Portal SE 6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: The…
CVE-2006-11202006-03-09Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, allow remote attackers to inject arbitrary…
CVE-2006-02202006-01-16Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3 through 6.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the d…
CVE-2005-42272005-12-14Multiple "potential" SQL injection vulnerabilities in DCP-Portal 6.1.1 might allow remote attackers to execute arbitrary SQL commands via (1) the password and…
CVE-2005-33652005-10-30Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded charact…
CVE-2005-04542005-05-02Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the lcat, doc, or uid p…
CVE-2004-25122004-12-31CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web co…
CVE-2004-25112004-12-31Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the y…
CVE-2002-02822002-05-31DCP-Portal 3.7 through 4.5 allows remote attackers to obtain the physical path of the server via (1) a direct request to add_user.php, or via an invalid new_la…
CVE-2002-02812002-05-31Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of other portal users by providing Javascript in th…