Lucene search
K

200 matches found

Cvelist
Cvelist
added 2023/01/12 12:0 a.m.15 views

CVE-2022-46438

A cross-site scripting XSS vulnerability in the /admin/articlecategory.php component of DouPHP v1.7 20221118 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the description parameter...

5.5AI score0.00213EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/01/12 12:0 a.m.5 views

CVE-2022-46438

A cross-site scripting XSS vulnerability in the /admin/articlecategory.php component of DouPHP v1.7 20221118 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the description parameter...

5.9AI score0.00213EPSS
Exploits1References1
0day.today
0day.today
added 2022/07/05 12:0 a.m.266 views

DouPHP 1.2 Release 20141027 SQL Injection Vulnerability

==================================================================================================================================== | Title : DouPHP v1.2 Release 20141027 SQL Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...

0.2AI score
Exploits0
Packet Storm
Packet Storm
added 2022/07/04 12:0 a.m.305 views

DouPHP 1.2 Release 20141027 SQL Injection

==================================================================================================================================== | Title : DouPHP v1.2 Release 20141027 SQL Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...

Exploits0
ATTACKERKB
ATTACKERKB
added 2022/03/30 12:15 p.m.2 views

CVE-2022-24131

DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting XSS through /admin/login.php in the background, which will lead to JavaScript code execution...

6.1CVSS5.5AI score0.00427EPSS
Exploits1References2
OSV
OSV
added 2022/03/30 12:15 p.m.0 views

CVE-2022-24131

DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting XSS through /admin/login.php in the background, which will lead to JavaScript code execution...

6.1CVSS5.9AI score0.00427EPSS
Exploits1References1
NVD
NVD
added 2022/03/30 12:15 p.m.9 views

CVE-2022-24131

DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting XSS through /admin/login.php in the background, which will lead to JavaScript code execution...

6.1CVSS0.00427EPSS
Exploits1References1
Prion
Prion
added 2022/03/30 12:15 p.m.18 views

Cross site scripting

DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting XSS through /admin/login.php in the background, which will lead to JavaScript code execution...

4.3CVSS6.2AI score0.00427EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2022/03/30 11:49 a.m.71 views

CVE-2022-24131

CVE-2022-24131 affects DouPHP v1.6 Release 20220121. The issue is a Cross Site Scripting (XSS) vulnerability in the backend via /admin/login.php that can lead to JavaScript code execution. Exploitation details, affected versions beyond the stated release, and remediation steps are not provided in...

6.1CVSS6.2AI score0.00427EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/03/30 11:49 a.m.10 views

CVE-2022-24131

DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting XSS through /admin/login.php in the background, which will lead to JavaScript code execution...

6.4AI score0.00427EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/03/30 12:0 a.m.2 views

DouCo DouPHP 跨站脚本漏洞

DouCo DouPHP is a lightweight enterprise content management system CMS from China's DouCo Network Technology. DouCo DouPHP v1.6 has a security vulnerability that originates from cross-site scripting XSS in the backend via /admin/login.php, which results in the execution of JavaScript code...

6.1CVSS6.1AI score0.00427EPSS
Exploits1References2
CNVD
CNVD
added 2022/03/29 12:0 a.m.15 views

DouPHP Cross-Site Scripting Vulnerability (CNVD-2022-72218)

A cross-site scripting vulnerability exists in DouPHP, a lightweight enterprise content management system CMS from China DouShell Network Technology. The vulnerability stems from a lack of data validation filtering of user-supplied data and output in the upload function of dmin/show.php. An...

3.5CVSS1.2AI score0.00288EPSS
Exploits0
CNNVD
CNNVD
added 2022/03/25 12:0 a.m.1 views

DouPHP 跨站脚本漏洞

A cross-site scripting vulnerability exists in DouPHP, a lightweight enterprise content management system CMS from China DouShell Network Technology. The vulnerability stems from a lack of data validation filtering of user-supplied data and output in the upload function of dmin/show.php. An...

4.8CVSS5.5AI score0.00288EPSS
Exploits0References3
CNVD
CNVD
added 2021/12/12 12:0 a.m.26 views

DouPHP Cross-Site Scripting Vulnerability (CNVD-2022-03909)

DouPHP is a lightweight enterprise content management system CMS from China DouShell Network Technology, Inc. A cross-site scripting vulnerability exists in DouPHP, which stems from a lack of data validation filtering of user-supplied and output data in /admin/cloud.php. An attacker could exploit...

4.3CVSS1.6AI score0.0024EPSS
Exploits0Affected Software1
NVD
NVD
added 2021/12/08 4:15 a.m.12 views

CVE-2021-3370

DouPHP v1.6 was discovered to contain a cross-site scripting XSS vulnerability via /admin/cloud.php...

6.1CVSS0.0024EPSS
Exploits0References1
Prion
Prion
added 2021/12/08 4:15 a.m.11 views

Cross site scripting

DouPHP v1.6 was discovered to contain a cross-site scripting XSS vulnerability via /admin/cloud.php...

4.3CVSS6AI score0.0024EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/12/08 3:42 a.m.47 views

CVE-2021-3370

DouPHP v1.6 contains a cross-site scripting (XSS) vulnerability in the /admin/cloud.php path. The issue stems from lack of proper data validation/escaping in user-supplied data, enabling injection of JavaScript into the client side. The affected component is the admin cloud page of DouPHP; CVE-20...

6.1CVSS6AI score0.0024EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/12/08 3:42 a.m.13 views

CVE-2021-3370

DouPHP v1.6 was discovered to contain a cross-site scripting XSS vulnerability via /admin/cloud.php...

6.2AI score0.0024EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/12/08 12:0 a.m.3 views

DouCo DouPHP 跨站脚本漏洞

DouPHP is a lightweight enterprise content management system CMS from China DouShell Network Technology, Inc. A cross-site scripting vulnerability exists in DouPHP, which stems from a lack of data validation filtering of user-supplied and output data in /admin/cloud.php. An attacker could exploit...

6.1CVSS5.6AI score0.0024EPSS
Exploits0References2
CNVD
CNVD
added 2020/07/07 12:0 a.m.1 views

SQL injection vulnerability in DouPHP sn***.php file at Zhangzhou Beanshell Network Technology Co.

DouPHP is a lightweight enterprise website management system based on PHP+Mysql architecture, running on various platforms such as Linux, Windows, MacOSX, Solaris and so on. A SQL injection vulnerability exists in the DouPHP sn.php file of Zhangzhou Beanshell Network Technology Co. Ltd, which can...

7.9AI score
Exploits0
Rows per page
Query Builder