CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-0935

A vulnerability was found in DolphinPHP up to 1.5.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file common.php of the component Incomplete Fix CVE-2021-46097. The manipulation of the argument id leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221551.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.009

EPSS Ranking 74.2%

CVSS Severity

CVSS v3 Score 6.3

CVSS v2 Score 6.5

References

Products affected by CVE-2023-0935

Dolphinphp Project » Dolphinphp » Version: 1.0.8

cpe:2.3:a:dolphinphp_project:dolphinphp:1.0.8
Dolphinphp Project » Dolphinphp » Version: 1.1.0

cpe:2.3:a:dolphinphp_project:dolphinphp:1.1.0
Dolphinphp Project » Dolphinphp » Version: 1.3.0

cpe:2.3:a:dolphinphp_project:dolphinphp:1.3.0
Dolphinphp Project » Dolphinphp » Version: 1.3.1

cpe:2.3:a:dolphinphp_project:dolphinphp:1.3.1
Dolphinphp Project » Dolphinphp » Version: 1.3.3

cpe:2.3:a:dolphinphp_project:dolphinphp:1.3.3
Dolphinphp Project » Dolphinphp » Version: 1.4.0

cpe:2.3:a:dolphinphp_project:dolphinphp:1.4.0
Dolphinphp Project » Dolphinphp » Version: 1.4.1

cpe:2.3:a:dolphinphp_project:dolphinphp:1.4.1
Dolphinphp Project » Dolphinphp » Version: 1.5.0

cpe:2.3:a:dolphinphp_project:dolphinphp:1.5.0
Dolphinphp Project » Dolphinphp » Version: 1.5.1

cpe:2.3:a:dolphinphp_project:dolphinphp:1.5.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-0935

Products

Pricing

Contact Us