Michael Dean Double Choco Latte — known CVE vulnerabilities

Every CVE whose affected-product data names Michael Dean Double Choco Latte, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2005-0887 — CVSS 7.5 (high): Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction…
• CVE-2002-1037 — CVSS 5.0 (medium): Cross-site scripting vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to inject arbitrary HTML, including…
• CVE-2002-1038 — CVSS 5.0 (medium): Double Choco Latte (DCL) before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain…
• CVE-2002-1039 — CVSS 5.0 (medium): Directory traversal vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to read arbitrary files via .. (dot…
• CVE-2005-0888 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject…