Dzcp » Dev!l'z Clanportal : Security Vulnerabilities, CVEs,
PHP remote file inclusion vulnerability in inc/config.php in deV!L`z Clanportal (DZCP) 1.5.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter.
Max CVSS
6.8
EPSS Score
0.94%
Published
2010-03-16
Updated
2010-03-17
inc/filebrowser/browser.php in deV!L`z Clanportal (DZCP) 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file parameter.
Max CVSS
5.0
EPSS Score
2.73%
Published
2007-03-02
Updated
2017-10-11
2 vulnerabilities found