Vulnerabilities in ocportal.com software