CVE-2022-25574

creationtimestamp| type| source ---|---|--- 2022-03-25 19:30:57+00:00| seen| https://t.me/cibsecurity/39547 2022-12-24 08:23:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3625 2023-01-29 12:39:15+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/2565...

CVE-2022-25574

A stored cross-site scripting XSS vulnerability in the upload function of /admin/show.php allows attackers to execute arbitrary web scripts or HTML via a crafted image file...

CVE-2022-25574

CVE-2022-25574 describes a stored XSS in the upload function /admin/show.php, affecting DouPHP (and related DouPhp/DouShell references in the connected entries). The root cause is insufficient input validation/escaping in the image upload pathway, allowing crafted image files to execute arbitrary...