Unrated severityNVD Advisory· Published Jun 2, 2014· Updated Jun 16, 2026
CVE-2013-1412
CVE-2013-1412
Description
DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is used in a preg_replace function call with an e modifier.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:dleviet:datalife_engine:9.7:*:*:*:*:*:*:*
- Range: =9.7
Patches
Vulnerability mechanics
References
8- dleviet.com/dle/bug-fix/3281-security-patches-for-dle-97.htmlnvdPatchVendor Advisory
- archives.neohapsis.com/archives/bugtraq/2013-01/0117.htmlnvdExploit
- karmainsecurity.com/KIS-2013-01nvdExploit
- www.exploit-db.com/exploits/24438nvdExploit
- www.exploit-db.com/exploits/24444nvdExploit
- osvdb.org/89662nvd
- secunia.com/advisories/51971nvd
- www.securityfocus.com/bid/57603nvd
News mentions
0No linked articles in our index yet.