What’s Vulnerable › Vulnerabilities

CVE-2013-1412

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 40.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-06-02 · updated 2026-06-16
• Weakness: CWE-94

Description

DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is used in a preg_replace function call with an e modifier.

Affected products

• Dleviet Datalife Engine: 9.7

References

• http://archives.neohapsis.com/archives/bugtraq/2013-01/0117.html
• http://dleviet.com/dle/bug-fix/3281-security-patches-for-dle-97.html
• http://karmainsecurity.com/KIS-2013-01
• http://osvdb.org/89662
• http://secunia.com/advisories/51971
• http://www.exploit-db.com/exploits/24438
• http://www.exploit-db.com/exploits/24444
• http://www.securityfocus.com/bid/57603
• http://archives.neohapsis.com/archives/bugtraq/2013-01/0117.html
• http://dleviet.com/dle/bug-fix/3281-security-patches-for-dle-97.html
• http://karmainsecurity.com/KIS-2013-01
• http://osvdb.org/89662

Get alerted when CVE-2013-1412 or the next vulnerability affects your stack