TI-2018-10608 CVE-2018-14777 · GHSA-cc8f-q7rc-7wcv
An issue was discovered in DataLife Engine (DLE) through 13.0.
Priority LOW 25
An issue was discovered in DataLife Engine (DLE) through 13.0.
3 records
An issue was discovered in DataLife Engine (DLE) through 13.0.
Session fixation vulnerability in DataLife Engine (DLE) 9.7 and earlier allows remote attackers to hijack web sessions via the PHPSESSID cookie.
DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is used in a preg_replace function call with an e modifier.