Dcscripts

dcscripts

10 CVEs • 4 products

Products (4)

Click to collapse

Toggle

CVEs (10)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-2050 1Dcscripts 1Dcforumlite Apr 16, 2026 Apr 26, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 SQL injection vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to execute arbitrary SQL commands via the az parameter.
CVE-2006-2049 1Dcscripts 1Dcforumlite Apr 16, 2026 Apr 26, 2006 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to inject arbitrary web script or HTML via the az parameter.
CVE-2005-4311 1Dcscripts 1Dcforum Apr 16, 2026 Dec 17, 2005 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via (1) the page parameter in dcboard.php and (2) unspecifie...Show more Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via (1) the page parameter in dcboard.php and (2) unspecified search parameters.Show less
CVE-2002-0492 1Dcscripts 1Dcshop Apr 16, 2026 Aug 12, 2002 N/A· v4 N/A· v3 5.0 MEDIUM· v2 dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the database parameter.
CVE-2002-0226 1Dcscripts 1Dcforum Apr 16, 2026 May 16, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate...Show more retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate the new password for that user.Show less
CVE-2001-0821 1Dcscripts 1Dcshop Apr 16, 2026 Dec 6, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for (1) orders.txt or (2) auth_user_file.t...Show more The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for (1) orders.txt or (2) auth_user_file.txt.Show less
CVE-2001-0527 1Dcscripts 2Dcforum Dcforum 2000 Apr 16, 2026 Aug 14, 2001 N/A· v4 N/A· v3 10.0 HIGH· v2 DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (\|) and newlines into the last name in the registration form, which will create an extra entry i...Show more DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (\|) and newlines into the last name in the registration form, which will create an extra entry in the registration database.Show less
CVE-2001-0437 1Dcscripts 2Dcforum Dcforum 2000 Apr 16, 2026 Jul 2, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file.
CVE-2001-0436 1Dcscripts 2Dcforum Dcforum 2000 Apr 16, 2026 Jul 2, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to the server and using a .. (dot dot) in the AZ parameter to reference the program.
CVE-2000-1132 1Dcscripts 1Dcforum Apr 16, 2026 Jan 9, 2001 N/A· v4 N/A· v3 6.4 MEDIUM· v2 DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed "forum" variable.