Vulnerabilities

TI-2023-00886 CVE-2023-0935 · GHSA-jw7g-f665-c8vw

DolphinPHP Incomplete Fix CVE-2021-46097 common.php os command injection

HIGH 75

A vulnerability was found in DolphinPHP up to 1.5.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04775 Published 2023-02-21 No fix listed CWE-78

TI-2022-17369 CVE-2022-37254 · GHSA-h5v2-45wq-whr4

LOW 25

DolphinPHP 1.5.1 is vulnerable to Cross Site Scripting (XSS) via Background - > System - > system function - > configuration management.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00499 Published 2022-08-19 No fix listed CWE-79

TI-2022-00981 CVE-2022-1086 · GHSA-4662-2x5w-867x

MEDIUM 58

A vulnerability was found in DolphinPHP up to 1.5.0 and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2022-03-29 No fix listed CWE-79