CVE:CVE-2006-6338
CNNVD:CNNVD-200612-090
deV!L`z Clanportal (DZCP)的upload/index.php存在无限制文件上载漏洞，远程攻击者可通过往上载到inc/images/uploads/userpics/的JPEG或GIF文件内嵌入PHP代码来上载和执行任意.php文件。
solution:Upgrade devilz_clanportal devilz_clanportal to a higher version than 1.3.6,and avoid the version 1.3.6