CVE-2005-3365

Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via (1) the name parameter in register.php, (2) the email parameter in lostpassword.php, (3) the year parameter in calendar.php, and the (4) cid parameter to index.php. NOTE: the mid parameter for forums.php is already associated with CVE-2005-0454. NOTE: the index.php/cid vector was later reported to affect 6.11.

• CWE-89

• http://glide.stanford.edu/yichen/research/sec.pdf
• http://marc.info/?l=bugtraq&m=113017151829342&w=2
• http://secunia.com/advisories/12751/Exploit, Vendor Advisory
• http://securityreason.com/securityalert/108
• http://www.osvdb.org/20493
• http://www.osvdb.org/20494
• http://www.securityfocus.com/archive/1/419280/100/0/threaded
• http://www.securityfocus.com/bid/15183Exploit
• http://www.securityfocus.com/bid/27167
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22855
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39447
• https://www.exploit-db.com/exploits/4853
• http://glide.stanford.edu/yichen/research/sec.pdf
• http://marc.info/?l=bugtraq&m=113017151829342&w=2
• http://secunia.com/advisories/12751/Exploit, Vendor Advisory
• http://securityreason.com/securityalert/108
• http://www.osvdb.org/20493
• http://www.osvdb.org/20494
• http://www.securityfocus.com/archive/1/419280/100/0/threaded
• http://www.securityfocus.com/bid/15183Exploit
• http://www.securityfocus.com/bid/27167
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22855
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39447
• https://www.exploit-db.com/exploits/4853

Published

Oct 30, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3359The atm module in Linux kernel 2.6 before 2.6.14 allows loca…
• CVE-2005-3360The installation of Trend Micro PC-Cillin Internet Security …
• CVE-2005-3361Cross-site scripting (XSS) vulnerability in forum/index.php …
• CVE-2005-3362Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-3363SQL injection vulnerability in Saphp Lesson, possibly saphp …
• CVE-2005-3364Multiple SQL injection vulnerabilities in DboardGear allow r…
• CVE-2005-3366PHP file inclusion vulnerability in index.php in PHP iCalend…
• CVE-2005-3367Cross-site scripting (XSS) vulnerability in journal.php in S…
• CVE-2005-3368Cross-site scripting (XSS) vulnerability in the Search_Enhan…
• CVE-2005-3369Multiple SQL injection vulnerabilities in the Info-DB module…
• CVE-2005-3370Multiple interpretation error in ArcaVir 2005 package 2005-0…
• CVE-2005-3371Multiple interpretation error in AVG 7 7.0.323 allows remote…