CVE-2006-6338

Unrestricted file upload vulnerability in upload/index.php in deV!L`z Clanportal (DZCP) before 1...

5.0 MediumPublic exploit

Unrestricted file upload vulnerability in upload/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote attackers to upload and execute arbitrary .php files by embedding PHP code in a JPEG or GIF file that is uploaded to inc/images/uploads/userpics/.

Exploit likelihood

2.69%Down 4.1 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2006-6338
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated: 2026-11-02

CVE List No score

Record: CVE-2006-6338
Updated: 2026-11-02

EUVDEUVD-2006-6321 No score

Record: EUVD-2006-6321
Updated: 2026-11-03

GitHub AdvisoriesGHSA-c3h7-7xr3-rp4r No score

Unrestricted file upload vulnerability in upload/index.php in deV!L`z Clanportal (DZCP) before 1...

Record: GHSA-c3h7-7xr3-rp4r
Updated: 2026-11-02

Affected products

devilz clanportal clanportal

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	DZCP (deV!L_z Clanportal) 1.3.6 - Arbitrary File Upload	2006-12-01

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-6338 is a medium vulnerability (CVSS 5.0) in Devilz Clanportal Clanportal, published December 7, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.69%, the 85th percentile. No source names a fixed version.