118 matches found
CVE-2018-14777
An issue was discovered in DataLife Engine DLE through 13.0. An attacker can use XSS related to the /addnews.html and /index.php?do=addnews URIs to send a malicious script to unsuspecting Admins or users...
EUVD-2006-3218
Malware in sbrugna...
EUVD-2008-6450
Malware in sbrugna...
EUVD-2007-1418
Malware in sbrugna...
EUVD-2013-7153
Malware in sbrugna...
EUVD-2009-3039
Malware in sbrugna...
EUVD-2018-6661
Malware in sbrugna...
EUVD-2010-2025
Malware in sbrugna...
EUVD-2008-6376
Malware in sbrugna...
CVE-2024-37699
An issue in DataLife Engine v.17.1 and before is vulnerable to SQL Injection in dboption...
CVE-2013-7387
Session fixation vulnerability in DataLife Engine DLE 9.7 and earlier allows remote attackers to hijack web sessions via the PHPSESSID cookie...
CVE-2024-37699
An issue in DataLife Engine v.17.1 and before is vulnerable to SQL Injection in dboption...
CVE-2024-37699
An issue in DataLife Engine v.17.1 and before is vulnerable to SQL Injection in dboption...
PT-2024-27719 · Unknown · Datalife Engine
Name of the Vulnerable Software and Affected Versions: DataLife Engine versions prior to 17.1 Description: The issue is related to SQL Injection in the dboption component. Recommendations: For versions prior to 17.1, consider restricting access to the dboption component to minimize the risk of...
CVE-2024-37699
CVE-2024-37699 affects DataLife Engine (DLE) v1.7.1 and earlier; the issue is a SQL injection in the dboption component. The root cause is inadequate input handling in dboption leading to SQL injection, with high impact on confidentiality, integrity, and availability (CVSS 3.1: 9.8, network attac...
CVE-2024-37699
An issue in DataLife Engine v.17.1 and before is vulnerable to SQL Injection in dboption...
DataLife Engine SQL Injection Vulnerability
DataLife Engine DLE is a CMS from DataLife Engine, Inc. that allows users to create and manage their own websites without programming. A SQL injection vulnerability exists in DataLife Engine v.17.1 and earlier versions, which stems from dboption being vulnerable to SQL injection attacks...
Datalife Engine 10 SQL Injection
==================================================================================================================================== | Title : Datalife Engine v10 ir SQl injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 64.0.2...
DataLife Engine Cross-Site Scripting Vulnerability
DataLife Engine DLE is a commercial content management system CMS. The system supports multi-level category management, WYSIWYG editing and image attachment management. A cross-site scripting vulnerability exists in DLE 13.0 and prior versions. A remote attacker can exploit the vulnerability to...
DataLife Engine 13.0 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications + Title: DataLife Engine Core Cross Site Scripting XSS & Execution Code + Author: Mostafa Gharzi + Team: Maher - CertCC.ir + Vendor Homepage: www.dleviet.com www.dle-news.com + Tested on: Windows 10 & Kali Linux + Versions: 13.0 and Before +...