Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Apr 16, 2026
CVE-2004-2511
CVE-2004-2511
Description
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the year, (2) month, and (3) day parameters in calendar.php; (4) the cid and (5) url parameters in index.php; (6) the cid parameter in annoucement.php; (7) the cid parameter in news.php; (8) the cid parameter in contents.php; (9) the q parameter in search.php; and (10) the country parameter in register.php.
Affected products
12cpe:2.3:a:codeworx_technologies:dcp-portal:*:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:codeworx_technologies:dcp-portal:*:*:*:*:*:*:*:*range: <=5.3.2
- cpe:2.3:a:codeworx_technologies:dcp-portal:3.7:*:*:*:*:*:*:*
- cpe:2.3:a:codeworx_technologies:dcp-portal:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:codeworx_technologies:dcp-portal:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:codeworx_technologies:dcp-portal:4.2:*:*:*:*:*:*:*
- cpe:2.3:a:codeworx_technologies:dcp-portal:4.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:codeworx_technologies:dcp-portal:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:codeworx_technologies:dcp-portal:5.2:*:*:*:*:*:*:*
- cpe:2.3:a:codeworx_technologies:dcp-portal:5.3:*:*:*:*:*:*:*
- cpe:2.3:a:codeworx_technologies:dcp-portal:5.3.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
13- archives.neohapsis.com/archives/bugtraq/2004-10/0042.htmlnvdExploit
- secunia.com/advisories/12751nvdExploitVendor Advisory
- securitytracker.com/idnvdExploit
- www.osvdb.org/10585nvdExploit
- www.osvdb.org/10587nvdExploit
- www.osvdb.org/10588nvdExploit
- www.osvdb.org/10589nvdExploit
- www.osvdb.org/10590nvdExploit
- www.osvdb.org/11405nvdExploit
- www.securityfocus.com/bid/11338nvdExploit
- www.securityfocus.com/bid/11339nvdExploit
- exchange.xforce.ibmcloud.com/vulnerabilities/17638nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/17639nvd
News mentions
0No linked articles in our index yet.