Dleviet

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2013-1412 Jun 02, 15:55 HIGH POC PATCH THREAT Act Now

DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is used in a preg_replace function call with an e modifier. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 85.1%.

PHP RCE Code Injection Datalife Engine Dleviet

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

85.1%

Threat

5.6

CVE-2018-14777 Aug 01, 19:29 MEDIUM POC This Month

An issue was discovered in DataLife Engine (DLE) through 13.0. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Datalife Engine Dleviet

NVD

CVSS 3.0

5.4

EPSS

0.7%

CVE-2013-7387 Jun 02, 15:55 MEDIUM POC PATCH This Month

Session fixation vulnerability in DataLife Engine (DLE) 9.7 and earlier allows remote attackers to hijack web sessions via the PHPSESSID cookie. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available.

Information Disclosure Datalife Engine Dleviet

NVD Exploit-DB

CVSS 2.0

6.8

EPSS

2.0%

CVE-2013-1412

EPSS 85% 5.6 CVSS 7.5

HIGH POC PATCH THREAT Act Now

PHP RCE Code Injection +2

NVD Exploit-DB

CVE-2018-14777

EPSS 1% CVSS 5.4

MEDIUM POC This Month

PHP XSS Datalife Engine +1

NVD

CVE-2013-7387

EPSS 2% CVSS 6.8

MEDIUM POC PATCH This Month

Information Disclosure Datalife Engine Dleviet

NVD Exploit-DB