Douchat

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Douchat records in CISA KEV

No Douchat vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2024-23375 CVE-2024-35324

MEDIUM 53

Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0213 Published 2024-05-28 No fix listed CWE-22

TI-2018-13256 CVE-2018-18737 · GHSA-jvf2-rrq7-v6rf

LOW 35

An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexml_load_string.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01199 Published 2018-10-28 No fix listed CWE-611