DCP Portal versions less than or equal to v6 are vulnerable to SQL injection and XSS attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40976/dcp-portalv6.txt
Source: https://packetstormsecurity.com/files/40976/dcp-portalv6.txt.html