Unrated severityNVD Advisory· Published Sep 15, 2006· Updated Apr 16, 2026
CVE-2006-4837
CVE-2006-4837
Description
Multiple PHP remote file inclusion vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in (1) library/lib.php and (2) library/editor/editor.php. NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that reveals the installation path in an error message.
Affected products
1- cpe:2.3:a:codeworx_technologies:dcp-portal:se_6.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5News mentions
0No linked articles in our index yet.