CVE-2022-46438

The CVE-2022-46438 vulnerability affects DouPHP v1.7 (build 20221118) in the /admin/article_category.php component. It enables cross-site scripting (XSS) by injecting a crafted payload into the description parameter of the affected function, allowing execution of arbitrary web scripts/HTML in a u...

CVE-2018-20567

CVE-2018-20567 affects DouCo DouPHP 1.5 (20181221). The issue resides in install\index.php, allowing a reload of the product in opportunistic scenarios when install.lock cannot be read. The vulnerability description does not provide exploit details or affected sub-components beyond this path and ...

CVE-2018-20566

CVE-2018-20566 affects DouCo DouPHP 1.5 20181221. A crafted installation page can trigger a Smarty error: unable to read resource, leading to full path disclosure. The issue is documented across multiple sources (NVD, Red Hat, CNVD, CVE lists) with the same symptom, but the provided documents do ...