What’s Vulnerable › Vulnerabilities

CVE-2013-7387

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-06-02 · updated 2026-06-17

Description

Session fixation vulnerability in DataLife Engine (DLE) 9.7 and earlier allows remote attackers to hijack web sessions via the PHPSESSID cookie.

Affected products

• Dleviet Datalife Engine: through 9.7

References

• http://dle-news.ru/bags/v97/1549-patchi-bezopasnosti-dlya-versii-97.html
• http://en.securitylab.ru/lab/PT-2012-53
• http://secunia.com/advisories/51971
• http://dle-news.ru/bags/v97/1549-patchi-bezopasnosti-dlya-versii-97.html
• http://en.securitylab.ru/lab/PT-2012-53
• http://secunia.com/advisories/51971

Get alerted when CVE-2013-7387 or the next vulnerability affects your stack