235 matches found
PT-2018-15431
Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP. The "admin/article.php?rec=update" API endpoint has a cross-site scripting XSS issue via the title parameter. Recommendations For DouPHP version 1.5 20181221, avo...
CVE-2018-20558: Improper Neutralization of Input During Web Page Generation
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/system.php?rec=update has XSS via the sitename parameter...
CVE-2018-20557: Improper Neutralization of Input During Web Page Generation
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/page.php?rec=edit has XSS via the pagename parameter...
CVE-2018-20563: Improper Neutralization of Input During Web Page Generation
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/mobile.php?rec=system&act=update has XSS via the mobilename parameter...
CVE-2018-20560: Improper Neutralization of Input During Web Page Generation
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/show.php?rec=update has XSS via the showname parameter...
PT-2018-15435
Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP, where the "admin/nav.php?rec=update" endpoint has a cross-site scripting XSS issue via the nav name parameter. Recommendations For DouPHP version 1.5 20181221,...
PT-2018-15428
Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP. The "admin/system.php?rec=update" API endpoint has a cross-site scripting XSS issue via the site name parameter. Recommendations For DouPHP version 1.5 20181221,...
PT-2018-15434
Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP, where the "admin/product category.php?rec=update" API endpoint has a cross-site scripting XSS issue via the cat name parameter. Recommendations For DouPHP version...
CVE-2018-20419
DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account...
Cross site request forgery (csrf)
DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account...
CVE-2018-20419
DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account...
CVE-2018-20419
CVE-2018-20419 affects DouCo DouPHP 1.5. The flaw arises from a CSRF in the upload/admin/manager.php?rec=insert endpoint, which can be used to incrementally add an administrator account. According to the NVD entry, the vulnerability has a CMS-level impact across confidentiality, integrity, and av...
CVE-2018-20419
DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account...
CVE-2018-20419: Cross-Site Request Forgery (CSRF)
DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account...
PT-2018-15363
Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 Description The issue allows for a CSRF attack via the "upload/admin/manager.php?rec=insert" endpoint to add an administrator account. Recommendations For DouPHP version 1.5, consider implementing CSRF protection measures to...
SQL injection vulnerability in DOUPHP ba***.php file
DouPHP is a lightweight enterprise website management system based on PHP+Mysql architecture, running on various platforms such as Linux, Windows, MacOSX, Solaris and so on. A SQL injection vulnerability exists in the DOUPHP ba.php file. An attacker can exploit this vulnerability to obtain...
Information leakage vulnerability in DouPHP database
DouPHP is a lightweight enterprise website management system based on PHP+Mysql architecture, running on various platforms such as Linux, Windows, MacOSX, Solaris and so on. An information leakage vulnerability exists in DouPHP database. The vulnerability is due to its database backup function do...
Code Execution Vulnerability in DouPHP
DouPHP is a lightweight enterprise website management system, based on PHP+Mysql architecture, can run on Linux, Windows, MacOSX, Solaris and other platforms. DouPHP has a code execution vulnerability that can be exploited by attackers to gain control of the server...
Code Execution Vulnerability in DouPHP V1.3
Douphp is a lightweight enterprise website management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. A code execution vulnerability exists in DouPHP V1.3. Allow attackers to exploit the vulnerability to write webshell, execute arbitrary cod...