VYPR
← All advisories
High severity8.8NVD Advisory· Published Feb 6, 2020· Updated Jun 16, 2026

CVE-2013-3638

CVE-2013-3638

Description

SQL injection vulnerability in Boonex Dolphin before 7.1.3 allows remote authenticated users to execute arbitrary SQL commands via the 'pathes' parameter in 'categories.php'.

Affected products

3
  • Boonex/Dolphin2 versions
    cpe:2.3:a:boonex:dolphin:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:boonex:dolphin:*:*:*:*:*:*:*:*range: <7.1.3
    • (no CPE)range: <7.1.3
  • Boonex/Dolphindescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.