DouPHP 跨站脚本漏洞

A cross-site scripting vulnerability exists in DouPHP, a lightweight enterprise content management system CMS from China DouShell Network Technology. The vulnerability stems from a lack of data validation filtering of user-supplied data and output in the upload function of dmin/show.php. An...

DouPHP Cross-Site Scripting Vulnerability (CNVD-2022-03909)

DouPHP is a lightweight enterprise content management system CMS from China DouShell Network Technology, Inc. A cross-site scripting vulnerability exists in DouPHP, which stems from a lack of data validation filtering of user-supplied and output data in /admin/cloud.php. An attacker could exploit...

CVE-2021-3370

DouPHP v1.6 was discovered to contain a cross-site scripting XSS vulnerability via /admin/cloud.php...

CVE-2021-3370

DouPHP v1.6 was discovered to contain a cross-site scripting XSS vulnerability via /admin/cloud.php...

Cross site scripting

DouPHP v1.6 was discovered to contain a cross-site scripting XSS vulnerability via /admin/cloud.php...

CVE-2021-3370

DouPHP v1.6 was discovered to contain a cross-site scripting XSS vulnerability via /admin/cloud.php...

CVE-2021-3370

DouPHP v1.6 contains a cross-site scripting (XSS) vulnerability in the /admin/cloud.php path. The issue stems from lack of proper data validation/escaping in user-supplied data, enabling injection of JavaScript into the client side. The affected component is the admin cloud page of DouPHP; CVE-20...

CVE-2021-3370: Improper Neutralization of Input During Web Page Generation

DouPHP v1.6 was discovered to contain a cross-site scripting XSS vulnerability via /admin/cloud.php...

DouCo DouPHP 跨站脚本漏洞

DouPHP is a lightweight enterprise content management system CMS from China DouShell Network Technology, Inc. A cross-site scripting vulnerability exists in DouPHP, which stems from a lack of data validation filtering of user-supplied and output data in /admin/cloud.php. An attacker could exploit...

SQL injection vulnerability in DouPHP sn***.php file at Zhangzhou Beanshell Network Technology Co.

DouPHP is a lightweight enterprise website management system based on PHP+Mysql architecture, running on various platforms such as Linux, Windows, MacOSX, Solaris and so on. A SQL injection vulnerability exists in the DouPHP sn.php file of Zhangzhou Beanshell Network Technology Co. Ltd, which can...

Logic flaw vulnerability in Douphp lo***.php file

DouPHP is a lightweight enterprise website management system based on PHP+Mysql architecture, running on various platforms such as Linux, Windows, MacOSX, Solaris and so on. A logic flaw vulnerability exists in the Douphp lo.php file. Attackers can capture packets for blasting and obtain sensitiv...

Arbitrary File Deletion Vulnerability in DouPHP

DouPHP is a lightweight enterprise website management system based on PHP+Mysql architecture, running on various platforms such as Linux, Windows, MacOSX, Solaris and so on. DouPHP has an arbitrary file deletion vulnerability, which can be exploited by attackers to cause system reinstallation...

Code execution vulnerability exists in DouPHP (CNVD-2019-29926)

DouPHP is a lightweight enterprise website management system based on PHP+Mysql architecture, running on various platforms such as Linux, Windows, MacOSX, Solaris and so on. DouPHP has a code execution vulnerability that can be exploited by attackers to gain control of the web server...

Code Execution Vulnerability in DouPHP_1.5

DouPHP1.5 is a lightweight enterprise website management system, based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. DouPHP1.5 suffers from a code execution vulnerability that can be exploited by attackers to execute arbitrary code...

DouPHP_1.5 Arbitrary File Deletion Vulnerability

DouPHP1.5 is a lightweight enterprise website management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. DouPHP1.5 has an arbitrary file deletion vulnerability that can be exploited by attackers to delete files arbitrarily...

Command Execution Vulnerability in DouPHP BLOG

DouPHPBLOG1.5 is a lightweight enterprise website management system, based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. DouPHPBLOG1.5 suffers from a code execution vulnerability that can be exploited by an attacker to gain control of the server...

DouPHP BLOG Arbitrary File Deletion Vulnerability

DouPHPBLOG1.5 is a lightweight enterprise website management system based on PHP+Mysql architecture, which can run on Linux, Windows, MacOSX, Solaris and other platforms. DouPHPBLOG1.5 suffers from an arbitrary file deletion vulnerability, which can be exploited by attackers to reinstall the...

CVE-2019-12564

In DouCo DouPHP v1.5 Release 20190516, remote attackers can view the database backup file via a brute-force guessing approach for data/backup/DyyyymmddThhmmss.sql filenames...

CVE-2019-12564

In DouCo DouPHP v1.5 Release 20190516, remote attackers can view the database backup file via a brute-force guessing approach for data/backup/DyyyymmddThhmmss.sql filenames...

Design/Logic Flaw

In DouCo DouPHP v1.5 Release 20190516, remote attackers can view the database backup file via a brute-force guessing approach for data/backup/DyyyymmddThhmmss.sql filenames...