CVE-2008-6406

CVE-2008-6406 is an XSS vulnerability reported in DataLife Engine (DLE) 7.2, located in admin.php and exploitable via the query string. The affected component is the admin interface; the underlying issue is improper handling of user-supplied input in the query parameters, allowing an attacker to ...

CVE-2010-2005

CVE-2010-2005 affects DataLife Engine 8.3 with multiple PHP remote file inclusion (RFI) vulnerabilities that allow an attacker to execute arbitrary PHP code. The affected vectors are: (1) selected_language to engine/inc/include/init.php, (2) config[langs] to engine/inc/help.php, (3) config[lang] ...