Vulnerabilities

TI-2010-00927 CVE-2010-0966 · GHSA-5wcf-rqm4-f7cv

PHP remote file inclusion vulnerability in inc/config.php in deV!L`z Clanportal (DZCP)…

LOW 35

PHP remote file inclusion vulnerability in inc/config.php in deV!L`z Clanportal (DZCP) 1.5.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.024 Published 2010-03-16 No fix listed CWE-94

TI-2007-01134 CVE-2007-1167 · GHSA-xw2m-596q-rf36

inc/filebrowser/browser.php in deV!L`z Clanportal (DZCP) 1.4.5 and earlier allows remote…

LOW 30

inc/filebrowser/browser.php in deV!L`z Clanportal (DZCP) 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04049 Published 2007-02-28 No fix listed CWE-200

Vulnerabilities

Filters

PHP remote file inclusion vulnerability in inc/config.php in deV!L`z Clanportal (DZCP)…

inc/filebrowser/browser.php in deV!L`z Clanportal (DZCP) 1.4.5 and earlier allows remote…