Lucene search
+L

28 matches found

ATTACKERKB
ATTACKERKB
added 2022/09/16 7:15 p.m.6 views

CVE-2022-38621

Doufox v0.0.4 was discovered to contain a remote code execution RCE vulnerability via the edit file page. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS6.6AI score0.24058EPSS
SaveExploits1References2
NVD
NVD
added 2022/09/16 7:15 p.m.17 views

CVE-2022-38621

Doufox v0.0.4 was discovered to contain a remote code execution RCE vulnerability via the edit file page. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS0.24058EPSS
SaveExploits1References1
Prion
Prion
added 2022/09/16 7:15 p.m.16 views

Remote code execution

Doufox v0.0.4 was discovered to contain a remote code execution RCE vulnerability via the edit file page. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

7.5CVSS9.8AI score0.24058EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/09/16 6:36 p.m.65 views

CVE-2022-38621

CVE-2022-38621 concerns Doufox v0.0.4, where a remote code execution (RCE) vulnerability exists on the edit file page. The issue allows an attacker to execute arbitrary code by supplying a crafted PHP file, as described across multiple sources (notably the NVD entry with a 9.8 CVSSv3.1 score). Th...

9.8CVSS9.9AI score0.24058EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/09/16 6:36 p.m.27 views

CVE-2022-38621

Doufox v0.0.4 was discovered to contain a remote code execution RCE vulnerability via the edit file page. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

10AI score0.24058EPSS
SaveExploits1References1
OSV
OSV
added 2022/09/16 6:36 p.m.13 views

CVE-2022-38621

Doufox v0.0.4 was discovered to contain a remote code execution RCE vulnerability via the edit file page. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS8.8AI score0.24058EPSS
SaveExploits1References3
CNVD
CNVD
added 2021/07/12 12:0 a.m.16 views

SQL Injection Vulnerability in DouFox Web Management System (CNVD-2021-55209)

DouFox is a PHP and MySQL based CMS builder. DouFox website management system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2020/04/03 12:0 a.m.1 views

Command Execution Vulnerability in DouFox

DouFox is a PHP and MySQL based website builder. DouFox has a command execution vulnerability that can be exploited by attackers to execute malicious code...

7.5AI score
SaveExploits0
Rows per page
Query Builder