PT-2024-38684

Name of the Vulnerable Software and Affected Versions DouPHP version 1.7 Release 20220822 Description A critical issue has been found in the Favicon Handler component of DouPHP, affecting some unknown functionality of the file /admin/system.php. The manipulation of the site favicon argument leads...

CVE-2018-20558: Improper Neutralization of Input During Web Page Generation

An issue was discovered in DouCo DouPHP 1.5 20181221. admin/system.php?rec=update has XSS via the sitename parameter...