PT-2024-38684

Name of the Vulnerable Software and Affected Versions DouPHP version 1.7 Release 20220822 Description A critical issue has been found in the Favicon Handler component of DouPHP, affecting some unknown functionality of the file /admin/system.php. The manipulation of the site favicon argument leads...

PT-2018-15428

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP. The "admin/system.php?rec=update" API endpoint has a cross-site scripting XSS issue via the site name parameter. Recommendations For DouPHP version 1.5 20181221,...

CVE-2018-20558: Improper Neutralization of Input During Web Page Generation

An issue was discovered in DouCo DouPHP 1.5 20181221. admin/system.php?rec=update has XSS via the sitename parameter...