Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2023-0935

Disclosure Date: February 21, 2023 (last updated February 24, 2025)
A vulnerability was found in DolphinPHP up to 1.5.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file common.php of the component Incomplete Fix CVE-2021-46097. The manipulation of the argument id leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221551.
Attacker Value
Unknown

CVE-2021-46097

Disclosure Date: January 27, 2022 (last updated February 23, 2025)
Dolphinphp v1.5.0 contains a remote code execution vulnerability in /application/common.php#action_log