CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-2511

Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the year, (2) month, and (3) day parameters in calendar.php; (4) the cid and (5) url parameters in index.php; (6) the cid parameter in annoucement.php; (7) the cid parameter in news.php; (8) the cid parameter in contents.php; (9) the q parameter in search.php; and (10) the country parameter in register.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.026

EPSS Ranking 84.9%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2004-2511

Codeworx Technologies » Dcp-Portal » Version: Any

cpe:2.3:a:codeworx_technologies:dcp-portal:*
Codeworx Technologies » Dcp-Portal » Version: 3.7

cpe:2.3:a:codeworx_technologies:dcp-portal:3.7
Codeworx Technologies » Dcp-Portal » Version: 4.0

cpe:2.3:a:codeworx_technologies:dcp-portal:4.0
Codeworx Technologies » Dcp-Portal » Version: 4.1

cpe:2.3:a:codeworx_technologies:dcp-portal:4.1
Codeworx Technologies » Dcp-Portal » Version: 4.2

cpe:2.3:a:codeworx_technologies:dcp-portal:4.2
Codeworx Technologies » Dcp-Portal » Version: 4.5.1

cpe:2.3:a:codeworx_technologies:dcp-portal:4.5.1
Codeworx Technologies » Dcp-Portal » Version: 5.0.1

cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.1
Codeworx Technologies » Dcp-Portal » Version: 5.0.2

cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.2
Codeworx Technologies » Dcp-Portal » Version: 5.1

cpe:2.3:a:codeworx_technologies:dcp-portal:5.1
Codeworx Technologies » Dcp-Portal » Version: 5.2

cpe:2.3:a:codeworx_technologies:dcp-portal:5.2
Codeworx Technologies » Dcp-Portal » Version: 5.3

cpe:2.3:a:codeworx_technologies:dcp-portal:5.3
Codeworx Technologies » Dcp-Portal » Version: 5.3.1

cpe:2.3:a:codeworx_technologies:dcp-portal:5.3.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-2511

Products

Pricing

Contact Us