Dolphinphp
Dolphinphp Project · 4 CVEs
CVE-2023-0935
CRITICAL
DolphinPHP Incomplete Fix CVE-2021-46097 common.php os command injection
Feb 21, 2023
CVE-2022-37254
MEDIUM
DolphinPHP 1.5.1 is vulnerable to Cross Site Scripting (XSS) via Background - > System - > system function - > configur…
Aug 19, 2022
CVE-2022-1086
MEDIUM
DolphinPHP User Management Page cross site scripting
Mar 29, 2022
CVE-2021-46097
HIGH
Dolphinphp v1.5.0 contains a remote code execution vulnerability in /application/common.php#action_log
Jan 27, 2022
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2023-0935 | DolphinPHP Incomplete Fix CVE-2021-46097 common.php os command injection | CRITICAL | 4.78% | Feb 21, 2023 |
| CVE-2022-37254 | DolphinPHP 1.5.1 is vulnerable to Cross Site Scripting (XSS) via Background - > System - > system function - > configuration management. | MEDIUM | 0.47% | Aug 19, 2022 |
| CVE-2022-1086 | DolphinPHP User Management Page cross site scripting | MEDIUM | 0.62% | Mar 29, 2022 |
| CVE-2021-46097 | Dolphinphp v1.5.0 contains a remote code execution vulnerability in /application/common.php#action_log | HIGH | 2.30% | Jan 27, 2022 |
Showing 1 to 4 of 4 CVEs