CVE-2023-0935

KRITISCH 9.8CVE-2023-0935 · Published 21/02/2023 · updated 17/06/2026

Kurz gesagt

CVE-2023-0935 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in dolphinphp (dolphinphp project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 4.8%, höher als bei 92.0% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
dolphinphp dolphinphp_project	`≤ 1.5.1`	No fix yet

Description

A vulnerability was found in DolphinPHP up to 1.5.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file common.php of the component Incomplete Fix CVE-2021-46097. The manipulation of the argument id leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221551.

References

ssteveez/dolphin · Exploit
vuldb.com · Permissions Required
vuldb.com · Permissions Required

Weitere Schwachstellen in dolphinphp

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free