A stored cross-site scripting (XSS) vulnerability in DouPHP v1.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the unique_id parameter in...
4.8CVSS
4.9AI Score
0.0005EPSS
A cross-site scripting (XSS) vulnerability in the /admin/article_category.php component of DouPHP v1.7 20221118 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the description...
5.4CVSS
5.3AI Score
0.001EPSS
DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through /admin/login.php in the background, which will lead to JavaScript code...
6.1CVSS
6.2AI Score
0.001EPSS
A stored cross-site scripting (XSS) vulnerability in the upload function of /admin/show.php allows attackers to execute arbitrary web scripts or HTML via a crafted image...
4.8CVSS
4.9AI Score
0.001EPSS
DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via...
6.1CVSS
6AI Score
0.001EPSS
In DouCo DouPHP v1.5 Release 20190516, remote attackers can view the database backup file via a brute-force guessing approach for data/backup/DyyyymmddThhmmss.sql...
9.8CVSS
7.5AI Score
0.033EPSS
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/show.php?rec=update has XSS via the show_name...
4.8CVSS
6.2AI Score
0.001EPSS
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article_category.php?rec=update has XSS via the cat_name...
4.8CVSS
6.2AI Score
0.001EPSS
An issue was discovered in DouCo DouPHP 1.5 20181221. It allows full path disclosure in "Smarty error: unable to read resource" error messages for a crafted installation...
5.3CVSS
7AI Score
0.001EPSS
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product.php?rec=update has XSS via the name...
4.8CVSS
6.2AI Score
0.001EPSS
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/system.php?rec=update has XSS via the site_name...
4.8CVSS
6.2AI Score
0.001EPSS
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/nav.php?rec=update has XSS via the nav_name...
4.8CVSS
6.2AI Score
0.001EPSS
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/mobile.php?rec=system&act=update has XSS via the mobile_name...
4.8CVSS
6.2AI Score
0.001EPSS
An issue was discovered in DouCo DouPHP 1.5 20181221. \install\index.php allows a reload of the product in opportunistic circumstances in which install.lock cannot be...
5.3CVSS
7.3AI Score
0.001EPSS
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product_category.php?rec=update has XSS via the cat_name...
4.8CVSS
6.2AI Score
0.001EPSS
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/page.php?rec=edit has XSS via the page_name...
4.8CVSS
6.2AI Score
0.001EPSS
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article.php?rec=update has XSS via the title...
4.8CVSS
6.2AI Score
0.001EPSS
DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator...
8.8CVSS
7.4AI Score
0.001EPSS