Douco / Douphp
20 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-2226 | DouPHP ZIP File file.php unrestricted upload | MEDIUM | 5.1 | Feb 9, 2026 |
| CVE-2024-57599 | Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a crafted payload injected into the descript… | MEDIUM | 4.8 | Feb 6, 2025 |
| CVE-2024-7917 | DouPHP Favicon system.php unrestricted upload | MEDIUM | 5.1 | Aug 18, 2024 |
| CVE-2022-46438 | A cross-site scripting (XSS) vulnerability in the /admin/article_category.php component of DouPHP v1.7 20221118 allows attackers to execute arbitrary web scrip… | MEDIUM | 5.4 | Jan 12, 2023 |
| CVE-2022-24131 | DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through /admin/login.php in the background, which will lead to JavaScript code execution. | MEDIUM | 6.1 | Mar 30, 2022 |
| CVE-2022-25574 | A stored cross-site scripting (XSS) vulnerability in the upload function of /admin/show.php allows attackers to execute arbitrary web scripts or HTML via a cra… | MEDIUM | 4.8 | Mar 25, 2022 |
| CVE-2021-3370 | DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via /admin/cloud.php. | MEDIUM | 6.1 | Dec 8, 2021 |
| CVE-2019-12564 | In DouCo DouPHP v1.5 Release 20190516, remote attackers can view the database backup file via a brute-force guessing approach for data/backup/DyyyymmddThhmmss.… | CRITICAL | 9.8 | Jun 2, 2019 |
| CVE-2018-20567 | An issue was discovered in DouCo DouPHP 1.5 20181221. \install\index.php allows a reload of the product in opportunistic circumstances in which install.lock ca… | MEDIUM | 5.3 | Dec 28, 2018 |
| CVE-2018-20566 | An issue was discovered in DouCo DouPHP 1.5 20181221. It allows full path disclosure in "Smarty error: unable to read resource" error messages for a crafted in… | MEDIUM | 5.3 | Dec 28, 2018 |
| CVE-2018-20565 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/nav.php?rec=update has XSS via the nav_name parameter. | MEDIUM | 4.8 | Dec 28, 2018 |
| CVE-2018-20564 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product_category.php?rec=update has XSS via the cat_name parameter. | MEDIUM | 4.8 | Dec 28, 2018 |
| CVE-2018-20563 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/mobile.php?rec=system&act=update has XSS via the mobile_name parameter. | MEDIUM | 4.8 | Dec 28, 2018 |
| CVE-2018-20562 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article_category.php?rec=update has XSS via the cat_name parameter. | MEDIUM | 4.8 | Dec 28, 2018 |
| CVE-2018-20561 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article.php?rec=update has XSS via the title parameter. | MEDIUM | 4.8 | Dec 28, 2018 |
| CVE-2018-20560 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/show.php?rec=update has XSS via the show_name parameter. | MEDIUM | 4.8 | Dec 28, 2018 |
| CVE-2018-20559 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product.php?rec=update has XSS via the name parameter. | MEDIUM | 4.8 | Dec 28, 2018 |
| CVE-2018-20558 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/system.php?rec=update has XSS via the site_name parameter. | MEDIUM | 4.8 | Dec 28, 2018 |
| CVE-2018-20557 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/page.php?rec=edit has XSS via the page_name parameter. | MEDIUM | 4.8 | Dec 28, 2018 |
| CVE-2018-20419 | DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account. | HIGH | 8.8 | Dec 24, 2018 |
Showing 1 to 20 of 20 CVEs