CVE-2013-1412

DataLife Engine DLE 9.7 allows remote attackers to execute arbitrary PHP code via the catlist parameter to engine/preview.php, which is used in a pregreplace function call with an e modifier...

PT-2014-2477

Name of the Vulnerable Software and Affected Versions DataLife Engine DLE version 9.7 Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved via the catlist parameter to "engine/preview.php". The vulnerability is exploited through a preg replace function cal...

CVE-2013-1412: Improper Control of Generation of Code

DataLife Engine DLE 9.7 allows remote attackers to execute arbitrary PHP code via the catlist parameter to engine/preview.php, which is used in a pregreplace function call with an e modifier...