Dolphinphp Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Dolphinphp Project records in CISA KEV

No Dolphinphp Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Dolphinphp · all components

TI-2023-00886 CVE-2023-0935 · GHSA-jw7g-f665-c8vw

HIGH 75

A vulnerability was found in DolphinPHP up to 1.5.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04775 Published 2023-02-21 No fix listed CWE-78

TI-2022-00981 CVE-2022-1086 · GHSA-4662-2x5w-867x

MEDIUM 58

A vulnerability was found in DolphinPHP up to 1.5.0 and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2022-03-29 No fix listed CWE-79

TI-2022-17369 CVE-2022-37254 · GHSA-h5v2-45wq-whr4

LOW 25

DolphinPHP 1.5.1 is vulnerable to Cross Site Scripting (XSS) via Background - > System - > system function - > configuration management.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00499 Published 2022-08-19 No fix listed CWE-79