Vulnerabilities > CVE-2013-7387 - Unspecified vulnerability in Dleviet Datalife Engine 9.7

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
dleviet
exploit available
NVD
Published: 2014-06-02
Updated: 2024-11-21

Summary

Session fixation vulnerability in DataLife Engine (DLE) 9.7 and earlier allows remote attackers to hijack web sessions via the PHPSESSID cookie.

Vulnerable Configurations

Part Description Count
Application
Dleviet
1

Exploit-Db

  • descriptionDataLife Engine preview.php PHP Code Injection. CVE-2013-1412,CVE-2013-7387. Remote exploit for php platform
    fileexploits/php/remote/24444.rb
    idEDB-ID:24444
    last seen2016-02-02
    modified2013-02-01
    platformphp
    port
    published2013-02-01
    reportermetasploit
    sourcehttps://www.exploit-db.com/download/24444/
    titleDataLife Engine preview.php PHP Code Injection
    typeremote
  • descriptionDataLife Engine 9.7 (preview.php) PHP Code Injection Vulnerability. CVE-2013-1412,CVE-2013-7387. Webapps exploit for php platform
    fileexploits/php/webapps/24438.txt
    idEDB-ID:24438
    last seen2016-02-02
    modified2013-01-28
    platformphp
    port
    published2013-01-28
    reporterEgiX
    sourcehttps://www.exploit-db.com/download/24438/
    titleDataLife Engine 9.7 preview.php PHP Code Injection Vulnerability
    typewebapps

References