Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the lcat doc or uid parameters to index.php or (2) the mid or bid parameters to forums.php.