Vulnerabilities

TI-2021-09288 CVE-2021-27969 · GHSA-jvc2-49mw-3383

Dolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder "width" parameter.

LOW 23

Dolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder "width" parameter.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00668 Published 2021-03-23 No fix listed CWE-79

TI-2013-03180 CVE-2013-3638 · GHSA-84v2-4rfh-wxjf

SQL injection vulnerability in Boonex Dolphin before 7.1.3 allows remote authenticated…

MEDIUM 41

SQL injection vulnerability in Boonex Dolphin before 7.1.3 allows remote authenticated users to execute arbitrary SQL commands via the 'pathes' parameter in 'categories.php'.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0141 Published 2020-02-06 No fix listed CWE-89

TI-2014-03543 CVE-2014-4333 · GHSA-4jqx-c8xq-4m8x

Cross-site request forgery (CSRF) vulnerability in administration/profiles.php in Dolphin…

LOW 32

Cross-site request forgery (CSRF) vulnerability in administration/profiles.php in Dolphin 7.1.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection a…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00938 Published 2014-06-19 No fix listed CWE-352

TI-2014-03090 CVE-2014-3810 · GHSA-8f4w-786j-j288

SQL injection vulnerability in administration/profiles.php in BoonEx Dolphin 7.1.4 and…

LOW 32

SQL injection vulnerability in administration/profiles.php in BoonEx Dolphin 7.1.4 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the members[] parameter.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01658 Published 2014-06-19 No fix listed CWE-89

TI-2012-00808 CVE-2012-0873 · GHSA-ffq2-v8mq-2884

Multiple cross-site scripting (XSS) vulnerabilities in Boonex Dolphin before 7.0.8 allow…

LOW 27

Multiple cross-site scripting (XSS) vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) explain parameter to explanation.php or the (2) photos_only, (3…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04101 Published 2012-02-23 No fix listed CWE-79

TI-2011-03285 CVE-2011-3728 · GHSA-qgc8-8jh5-vqgh

Dolphin 7.0.4 allows remote attackers to obtain sensitive information via a direct…

LOW 25

Dolphin 7.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xmlrpc/BxDolXMLRPCProfileView.php and…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01229 Published 2011-09-23 No fix listed CWE-200

TI-2008-03030 CVE-2008-3167 · GHSA-6p6q-jpg9-mwpp

Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when…

MEDIUM 49

Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) dir[plugins] parameter to (a) HTMLSa…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06463 Published 2008-07-14 No fix listed CWE-94

TI-2006-05222 CVE-2006-5410 · GHSA-49p5-5qm7-494m

PHP remote file inclusion vulnerability in templates/tmpl_dfl/scripts/index.php in BoonEx…

LOW 26

PHP remote file inclusion vulnerability in templates/tmpl_dfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter.

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.01521 Published 2006-10-20 No fix listed

TI-2006-04046 CVE-2006-4189 · GHSA-24xv-wv3m-hcqm

Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers…

LOW 32

Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) index.php, (2) aemodule.php, (3) browse.php, (4) cc.php, (…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.06344 Published 2006-08-17 No fix listed

Vulnerabilities

Filters