| Package | Affected versions | Patched versions |
|---|---|---|
| datalife engine | = 9.7 |
DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is used in a preg_replace function call with an e modifier.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free