dzcp records
3 published records for vendor dzcp.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2012-5000Proof of concept | SQL injection vulnerability in jokes/index.php in the Witze addon 0.9 for deV!L'z Clanportal allows remote attackers to execute arbitrary SQblueteck · witze addon · CWE-89 | High7.5 | — | 1.1% | Sep 19, 2012 |
28Monitor | CVE-2010-0966Proof of concept | PHP remote file inclusion vulnerability in inc/config.php in deV!L`z Clanportal (DZCP) 1.5.2, when register_globals is enabled, allows remotdzcp · dev\!l\'z clanportal · CWE-94 | Medium6.8 | — | 2.4% | Mar 16, 2010 |
21Monitor | CVE-2007-1167Proof of concept | inc/filebrowser/browser.php in deV!L`z Clanportal (DZCP) 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.phdzcp · dev\!l\'z clanportal · CWE-200 | Medium5.0 | — | 4.0% | Mar 2, 2007 |
- CVE-2012-500030Monitor
SQL injection vulnerability in jokes/index.php in the Witze addon 0.9 for deV!L'z Clanportal allows remote attackers to execute arbitrary SQ
HighCVSS 7.5Proof of conceptEPSS 1%blueteck · witze addonSep 19, 2012
- CVE-2010-096628Monitor
PHP remote file inclusion vulnerability in inc/config.php in deV!L`z Clanportal (DZCP) 1.5.2, when register_globals is enabled, allows remot
MediumCVSS 6.8Proof of conceptEPSS 2%dzcp · dev\!l\'z clanportalMar 16, 2010
- CVE-2007-116721Monitor
inc/filebrowser/browser.php in deV!L`z Clanportal (DZCP) 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.ph
MediumCVSS 5.0Proof of conceptEPSS 4%dzcp · dev\!l\'z clanportalMar 2, 2007