CVE-2012-0906

Name of the Vulnerable Software and Affected Versions deV!L'z Clanportal (DZCP) version 1.5.5

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the id parameter in a showkat action to the "index.php" endpoint.

Recommendations For version 1.5.5, avoid using the id parameter in the "index.php" endpoint until the issue is resolved. As a temporary workaround, consider restricting access to the showkat action to minimize the risk of exploitation.