DataLife.Engine.Catlist.Parameter.PHP.Code.Injection

Description

This indicates an attack attempt against a PHP Code Injection vulnerability in DataLife Engine.
The vulnerability is caused by an error when the vulnerable software handles a malicious HTTP request with a crafted URI. It allows a remote attacker to execute arbitrary PHP code via sending a crafted URI to a vulnerable application.

Affected Products

DataLife Engine 9.7

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the vendor's patch

References