CVE-2006-4836: Codeworx Technologies Dcp-Portal

Medium severity, CVSS 5.1. EPSS: 2.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in login.php in DCP-Portal SE 6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: The lostpassword.php and calendar.php vectors are already covered by CVE-2005-3365, and the search.php vector is already covered by CVE-2005-4227.

Affected products

• Codeworx Technologies Dcp-Portal: version se_6.0 only

Published 2006-09-15. Last modified 2026-06-16.