Douco

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Douco records in CISA KEV

No Douco vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Douphp 20 records MEDIUM

Records

20 records in Douphp · all components

TI-2026-01874 CVE-2026-2226 · GHSA-hp62-q4v5-3g77

DouPHP ZIP File file.php unrestricted upload

MEDIUM 56

A vulnerability has been found in DouPHP up to 1.9.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00405 Published 2026-02-09 No fix listed CWE-284

TI-2024-07339 CVE-2024-7917 · GHSA-qhrh-2828-h98h

DouPHP Favicon system.php unrestricted upload

MEDIUM 56

A vulnerability, which was classified as critical, has been found in DouPHP 1.7 Release 20220822.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00588 Published 2024-08-18 No fix listed CWE-434

TI-2024-37954 CVE-2024-57599 · GHSA-7ghx-59p7-w2w6

Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to…

MEDIUM 55

Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a crafted payload injected into the description parameter in /admin/article.php

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00332 Published 2025-02-06 No fix listed CWE-79

TI-2019-09379 CVE-2019-12564 · GHSA-89ff-6c66-w9m5

In DouCo DouPHP v1.5 Release 20190516, remote attackers can view the database backup file…

MEDIUM 46

In DouCo DouPHP v1.5 Release 20190516, remote attackers can view the database backup file via a brute-force guessing approach for data/backup/DyyyymmddThhmmss.sql filenames.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02011 Published 2019-06-02 No fix listed CWE-287

TI-2018-14464 CVE-2018-20419 · GHSA-6h83-7m8c-wmh6

DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account.

LOW 39

DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00483 Published 2018-12-24 No fix listed CWE-352

TI-2022-08076 CVE-2022-24131 · GHSA-pp7c-rg85-7pxj

DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through…

LOW 29

DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through /admin/login.php in the background, which will lead to JavaScript code execution.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2022-03-30 No fix listed CWE-79

TI-2021-02352 CVE-2021-3370 · GHSA-7rr4-2h5v-8fm6

DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via /admin/cloud.php.

LOW 28

DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via /admin/cloud.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00581 Published 2021-12-08 No fix listed CWE-79

TI-2018-14589 CVE-2018-20566 · GHSA-grvr-p5w5-26pc

An issue was discovered in DouCo DouPHP 1.5 20181221.

LOW 27

An issue was discovered in DouCo DouPHP 1.5 20181221.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01289 Published 2018-12-28 No fix listed CWE-22

TI-2018-14590 CVE-2018-20567 · GHSA-7ghg-23h8-fj3m

An issue was discovered in DouCo DouPHP 1.5 20181221.

LOW 26

An issue was discovered in DouCo DouPHP 1.5 20181221.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01034 Published 2018-12-28 No fix listed CWE-732

TI-2022-22955 CVE-2022-46438 · GHSA-7g72-m37j-c82m

A cross-site scripting (XSS) vulnerability in the /admin/article_category.php component…

LOW 25

A cross-site scripting (XSS) vulnerability in the /admin/article_category.php component of DouPHP v1.7 20221118 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the descriptio…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00404 Published 2023-01-12 No fix listed CWE-79

TI-2018-14588 CVE-2018-20565 · GHSA-3mhx-94rj-7j37

An issue was discovered in DouCo DouPHP 1.5 20181221.

LOW 23

An issue was discovered in DouCo DouPHP 1.5 20181221.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00534 Published 2018-12-28 No fix listed CWE-79

TI-2018-14587 CVE-2018-20564 · GHSA-pfr4-9r3q-vj2v

An issue was discovered in DouCo DouPHP 1.5 20181221.

LOW 23

An issue was discovered in DouCo DouPHP 1.5 20181221.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00534 Published 2018-12-28 No fix listed CWE-79

TI-2018-14586 CVE-2018-20563 · GHSA-j38g-j9x2-fff6

An issue was discovered in DouCo DouPHP 1.5 20181221.

LOW 23

An issue was discovered in DouCo DouPHP 1.5 20181221.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00534 Published 2018-12-28 No fix listed CWE-79

TI-2018-14585 CVE-2018-20562 · GHSA-w7qq-p9w7-7cx8

An issue was discovered in DouCo DouPHP 1.5 20181221.

LOW 23

An issue was discovered in DouCo DouPHP 1.5 20181221.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00534 Published 2018-12-28 No fix listed CWE-79

TI-2018-14584 CVE-2018-20561 · GHSA-rhh9-g4w4-r3cc

An issue was discovered in DouCo DouPHP 1.5 20181221.

LOW 23

An issue was discovered in DouCo DouPHP 1.5 20181221.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00534 Published 2018-12-28 No fix listed CWE-79

TI-2018-14583 CVE-2018-20560 · GHSA-q7j5-637p-r696

An issue was discovered in DouCo DouPHP 1.5 20181221.

LOW 23

An issue was discovered in DouCo DouPHP 1.5 20181221.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00534 Published 2018-12-28 No fix listed CWE-79

TI-2018-14582 CVE-2018-20559 · GHSA-4wrv-p79w-3qmj

An issue was discovered in DouCo DouPHP 1.5 20181221.

LOW 23

An issue was discovered in DouCo DouPHP 1.5 20181221.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00534 Published 2018-12-28 No fix listed CWE-79

TI-2018-14581 CVE-2018-20558 · GHSA-g6p6-mx46-ffvr

An issue was discovered in DouCo DouPHP 1.5 20181221.

LOW 23

An issue was discovered in DouCo DouPHP 1.5 20181221.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00534 Published 2018-12-28 No fix listed CWE-79

TI-2018-14580 CVE-2018-20557 · GHSA-9h46-wvc5-c4hf

An issue was discovered in DouCo DouPHP 1.5 20181221.

LOW 23

An issue was discovered in DouCo DouPHP 1.5 20181221.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00534 Published 2018-12-28 No fix listed CWE-79

TI-2022-09173 CVE-2022-25574 · GHSA-46wj-w3vw-88rm

A stored cross-site scripting (XSS) vulnerability in the upload function of…

LOW 22

A stored cross-site scripting (XSS) vulnerability in the upload function of /admin/show.php allows attackers to execute arbitrary web scripts or HTML via a crafted image file.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00432 Published 2022-03-25 No fix listed CWE-79

Open these records in search →