138 matches found
EUVD-2026-85711
A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function stripdata of the file engine/modules/search.php of the component Search Module. The manipulation of the argument story leads to sql injection. The attack can be initiated remotely. The exploit i...
CVE-2026-96604
A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function stripdata of the file engine/modules/search.php of the component Search Module. The manipulation of the argument story leads to sql injection. The attack can be initiated remotely. The exploit i...
CVE-2026-96604 SoftNews Media Group DataLife Engine Search search.php strip_data sql injection
A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function stripdata of the file engine/modules/search.php of the component Search Module. The manipulation of the argument story leads to sql injection. The attack can be initiated remotely. The exploit i...
CVE-2026-96604 SoftNews Media Group DataLife Engine Search search.php strip_data sql injection
A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function stripdata of the file engine/modules/search.php of the component Search Module. The manipulation of the argument story leads to sql injection. The attack can be initiated remotely. The exploit i...
CVE-2026-96604
A SQL injection vulnerability exists in the Search Module of SoftNews Media Group DataLife Engine 18.0 . The flaw is located within the strip_data function of the file engine/modules/search.php , where the manipulation of the story argument allows for remote exploitation. The documents state that...
PT-2026-97609
Name of the Vulnerable Software and Affected Versions SoftNews Media Group DataLife Engine version 18.0 Description An issue exists in the Search Module within the strip data function of the engine/modules/search.php file. A remote attacker can trigger a SQL injection by manipulating the story...
CVE-2026-96604: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function stripdata of the file engine/modules/search.php of the component Search Module. The manipulation of the argument story leads to sql injection. The attack can be initiated remotely. The exploit i...
CVE-2018-14777
An issue was discovered in DataLife Engine DLE through 13.0. An attacker can use XSS related to the /addnews.html and /index.php?do=addnews URIs to send a malicious script to unsuspecting Admins or users...
EUVD-2013-7153
Malware in sbrugna...
EUVD-2009-3039
Malware in sbrugna...
EUVD-2010-2025
Malware in sbrugna...
EUVD-2007-1418
Malware in sbrugna...
EUVD-2008-6450
Malware in sbrugna...
EUVD-2006-3218
Malware in sbrugna...
EUVD-2018-6661
Malware in sbrugna...
EUVD-2008-6376
Malware in sbrugna...
CVE-2024-37699
An issue in DataLife Engine v.17.1 and before is vulnerable to SQL Injection in dboption...
CVE-2013-7387
Session fixation vulnerability in DataLife Engine DLE 9.7 and earlier allows remote attackers to hijack web sessions via the PHPSESSID cookie...
CVE-2024-37699
An issue in DataLife Engine v.17.1 and before is vulnerable to SQL Injection in dboption...
DataLife Engine SQL Injection Vulnerability
DataLife Engine DLE is a CMS from DataLife Engine, Inc. that allows users to create and manage their own websites without programming. A SQL injection vulnerability exists in DataLife Engine v.17.1 and earlier versions, which stems from dboption being vulnerable to SQL injection attacks...