DouPHP_1.5 Arbitrary File Deletion Vulnerability

DouPHP1.5 is a lightweight enterprise website management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. DouPHP1.5 has an arbitrary file deletion vulnerability that can be exploited by attackers to delete files arbitrarily...

CVE-2018-20558

An issue was discovered in DouCo DouPHP 1.5 20181221. admin/system.php?rec=update has XSS via the sitename parameter...