CVE-2024-7917

DouPHP 1.7 Release 20220822 is affected in the Favicon Handler, specifically /admin/system.php where the site_favicon parameter enables unrestricted file upload. The issue is exploitable remotely and documented as a full unrestricted upload vulnerability, implying risk of arbitrary file upload on...

CVE-2026-2226

CVE-2026-2226 affects DouPHP up to 1.9, targeting the ZIP File Handler component. The issue arises from manipulating the argument sql_filename in the file /admin/file.php, leading to unrestricted upload. The vulnerability can be exploited remotely, and the exploit has been disclosed publicly. The...