Vendor

datalifecms vulnerabilities

2 published CVES affecting datalifecms, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 2
Critical: 0
High: 1
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Atom feed of datalifecms alerts

Products

datalife engine 2

Latest datalifecms CVEs

Newest publication first

CVE-2010-2005 Multiple PHP remote file inclusion vulnerabilities in DataLife Engine (DLE) 8.3 allow remote attackers to execute arbitrary PHP code via a URL in (1) the selected_language parameter to engine/inc/incl...
Published 2010-05-20

HighCVSS 7.5 EPSS 2.8%

Multiple PHP remote file inclusion vulnerabilities in DataLife Engine (DLE) 8.3 allow remote attackers to execute arbitrary PHP code via a URL in (1) the selected_language parameter to engine/inc/include/init.php, (2) the config[langs] parameter to engine/inc/help.php, (3) the co...
CVE-2008-6406 Cross-site scripting (XSS) vulnerability in admin.php in DataLife Engine (DLE) 7.2 allows remote attackers to inject arbitrary web script or HTML via the query string.
Published 2009-03-06

MediumCVSS 4.3 EPSS 1.5%

Cross-site scripting (XSS) vulnerability in admin.php in DataLife Engine (DLE) 7.2 allows remote attackers to inject arbitrary web script or HTML via the query string.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

datalifecms vulnerabilities

Products

Latest datalifecms CVEs

CVE-2010-2005 Multiple PHP remote file inclusion vulnerabilities in DataLife Engine (DLE) 8.3 allow remote attackers to execute arbitrary PHP code via a URL in (1) the selected_language parameter to engine/inc/incl...

CVE-2008-6406 Cross-site scripting (XSS) vulnerability in admin.php in DataLife Engine (DLE) 7.2 allows remote attackers to inject arbitrary web script or HTML via the query string.