EIP-2026-106390

The provided code demonstrates SQL injection vulnerabilities in DCP-Portal 6.1.1 by injecting malicious SQL queries via URL parameters to extract user credentials from the database. The exploit leverages UNION-based SQLi to retrieve usernames and passwords from the `dcp5_members` table.