TI-2026-63820 CVE-2026-96604 · GHSA-674c-29gj-gv39
SoftNews Media Group DataLife Engine Search search.php strip_data sql injection
Priority HIGH 70
A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0.
SoftNews Media Group
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
SoftNews Media Group records in CISA KEVNo SoftNews Media Group vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2007-01366 CVE-2007-1424 · GHSA-r5r6-4ghv-87gp
Multiple PHP remote file inclusion vulnerabilities in Softnews Media Group DataLife…
Priority LOW 38
Multiple PHP remote file inclusion vulnerabilities in Softnews Media Group DataLife Engine allow remote attackers to execute arbitrary PHP code via a URL in the root_dir parameter to (1) init.php and (2) Ajax/editnews.ph…
TI-2006-03121 CVE-2006-3221 · GHSA-fw66-28wv-q8g2
SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote…
Priority LOW 35
SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded values in the user parameter in a userinfo subaction.
TI-2008-06170 CVE-2008-6480 · GHSA-fjw5-gg3p-qgcr
Cross-site request forgery (CSRF) vulnerability in engine/modules/imagepreview.php in…
Priority LOW 31
Cross-site request forgery (CSRF) vulnerability in engine/modules/imagepreview.php in Datalife Engine 6.7 allows remote attackers to hijack the authentication of arbitrary users for requests that use a modified image par…