DouCo DouPHP Cross-Site Scripting Vulnerability (CNVD-2019-01001)

DouCo DouPHP is a lightweight open source CMS Content Management System based on PHP and MySQL. A cross-site scripting vulnerability exists in admin/mobile.php?rec=system&act=update in DouCo DouPHP version 1.5 20181221. A remote attacker can exploit this vulnerability to inject arbitrary web scri...

PT-2018-15433

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP. The "admin/mobile.php?rec=system&act=update" endpoint has a cross-site scripting XSS issue via the mobile name parameter. Recommendations For DouPHP version 1.5...