CVE-2013-1412

Related Files

DataLife Engine preview.php PHP Code Injection

Posted Feb 1, 2013

Authored by EgiX, juan vazquez | Site metasploit.com

This Metasploit module exploits a PHP code injection vulnerability DataLife Engine 9.7. The vulnerability exists in preview.php, due to an insecure usage of preg_replace() with the e modifier, which allows to inject arbitrary php code, when the template in use contains a [catlist] or [not-catlist] tag.

tags | exploit, arbitrary, php

advisories | CVE-2013-1412

SHA-256 | 50f8efbcf7eeeb9778960d972ce5de90e0aadc26bfd2b879e8e78dbcd0d82f9c

Download | Favorite | View

DataLife Engine 9.7 PHP Code Injection

Posted Jan 29, 2013

Authored by EgiX | Site karmainsecurity.com

DataLife Engine version 9.7 suffers from a PHP code injection vulnerability in preview.php.

tags | exploit, php

advisories | CVE-2013-1412

SHA-256 | f9fca371c6cc4a2c4cbce0576e95fe335c2ff36d4ec6b96f3b9230f8bf8b8d3a

Download | Favorite | View