Vendors / Dleviet Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Dleviet records in CISA KEV No Dleviet vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 61
DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is used in a preg_replace function call with an e modifier.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.40465 · Published 2014-06-02 · No fix listed CWE-94
Priority LOW 38
Session fixation vulnerability in DataLife Engine (DLE) 9.7 and earlier allows remote attackers to hijack web sessions via the PHPSESSID cookie.
CVSS 2.0 MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04955 · Published 2014-06-02 · No fix listed
Priority LOW 25
An issue was discovered in DataLife Engine (DLE) through 13.0.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00653 · Published 2018-08-01 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 1 2 0 0
