Filtered by vendor Softnews Media Group Subscriptions
Filtered by product Datalife Engine Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-37699 1 Softnews Media Group 1 Datalife Engine 2024-11-21 9.8 Critical
An issue in DataLife Engine v.17.1 and before is vulnerable to SQL Injection in dboption.
CVE-2008-6480 1 Softnews Media Group 1 Datalife Engine 2024-11-21 N/A
Cross-site request forgery (CSRF) vulnerability in engine/modules/imagepreview.php in Datalife Engine 6.7 allows remote attackers to hijack the authentication of arbitrary users for requests that use a modified image parameter.
CVE-2007-1424 1 Softnews Media Group 1 Datalife Engine 2024-11-21 N/A
Multiple PHP remote file inclusion vulnerabilities in Softnews Media Group DataLife Engine allow remote attackers to execute arbitrary PHP code via a URL in the root_dir parameter to (1) init.php and (2) Ajax/editnews.php. NOTE: some of these details are obtained from third party information.
CVE-2006-3221 1 Softnews Media Group 1 Datalife Engine 2024-11-21 N/A
SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded values in the user parameter in a userinfo subaction.