CVE-2022-42246: Cross-Site Request Forgery (CSRF)

Doufox 0.0.4 contains a CSRF vulnerability that can add system administrator account...

Doufox 跨站请求伪造漏洞

Doufox is an open source PHP and MySQL-based powerful CMS website builder. version 0.0.4 of Doufox is vulnerable to cross-site request forgery, which stems from a WEB application that does not sufficiently validate that the request is from a trusted user. An attacker could use this vulnerability ...

CVE-2022-38621

Doufox v0.0.4 was discovered to contain a remote code execution RCE vulnerability via the edit file page. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-38621

Doufox v0.0.4 was discovered to contain a remote code execution RCE vulnerability via the edit file page. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

Remote code execution

Doufox v0.0.4 was discovered to contain a remote code execution RCE vulnerability via the edit file page. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-38621

CVE-2022-38621 concerns Doufox v0.0.4, where a remote code execution (RCE) vulnerability exists on the edit file page. The issue allows an attacker to execute arbitrary code by supplying a crafted PHP file, as described across multiple sources (notably the NVD entry with a 9.8 CVSSv3.1 score). Th...

CVE-2022-38621

Doufox v0.0.4 was discovered to contain a remote code execution RCE vulnerability via the edit file page. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-38621

Doufox v0.0.4 was discovered to contain a remote code execution RCE vulnerability via the edit file page. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-38621: Undefined Security Weakness

Doufox v0.0.4 was discovered to contain a remote code execution RCE vulnerability via the edit file page. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

SQL Injection Vulnerability in DouFox Web Management System (CNVD-2021-55209)

DouFox is a PHP and MySQL based CMS builder. DouFox website management system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Command Execution Vulnerability in DouFox

DouFox is a PHP and MySQL based website builder. DouFox has a command execution vulnerability that can be exploited by attackers to execute malicious code...