PatchTheCVEdcp-portal vulnerabilities and fixes
Recent CVEs affecting dcp-portal, with upgrade or downgrade steps. 14 tracked.
Also searched as: dcp portal.
dcp-portal has 14 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2007-04-25. Highest priority: CVE-2006-4837 (score 53/100).
- CVE-2007-2278 HIGH 7.5 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in DCP-Portal 6.1.1 allow remote attackers to execute arbit
- CVE-2006-4838 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to inject arbi
- CVE-2006-4837 HIGH 7.5 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to execute arbi
- CVE-2006-4836 MEDIUM 5.1 DOWNGRADE SQL injection vulnerability in login.php in DCP-Portal SE 6.0 allows remote attackers to execute arbitrary SQL
- CVE-2006-1120 LOW 2.6 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals ena
- CVE-2006-0220 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3 through 6.1.1 allow remote attackers to
- CVE-2005-4227 HIGH 7.5 DOWNGRADE Multiple "potential" SQL injection vulnerabilities in DCP-Portal 6.1.1 might allow remote attackers to execute
- CVE-2005-3365 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary
- CVE-2005-0454 HIGH 7.5 UPGRADE Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbit
- CVE-2004-2512 MEDIUM 4.3 UPGRADE CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduc
- CVE-2004-2511 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to
- CVE-2003-1536 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1 allow remote att
- CVE-2002-0282 MEDIUM 5.0 DOWNGRADE DCP-Portal 3.7 through 4.5 allows remote attackers to obtain the physical path of the server via (1) a direct
- CVE-2002-0281 MEDIUM 5.1 DOWNGRADE Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of
FAQ
How do I fix dcp-portal vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dcp-portal being exploited right now?
None of the tracked dcp-portal CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dcp-portal CVE should I patch first?
CVE-2006-4837 currently ranks highest (53/100): Multiple PHP remote file inclusion vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to execute arbi.