Vulnerabilities

TI-2023-20235 CVE-2023-38996 · GHSA-p8f2-pv69-c68g

An issue in all versions of Douran DSGate allows a local authenticated privileged…

HIGH 65

An issue in all versions of Douran DSGate allows a local authenticated privileged attacker to execute arbitrary code via the debug command.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00405 Published 2023-08-22 No fix listed

TI-2011-01388 CVE-2011-1569 · GHSA-9hh8-jw9v-6483

download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of…

LOW 29

download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of arbitrary files under the web root via (1) a trailing ".", (2) a trailing space, or (3) mixed case in the FileNameAttach parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03524 Published 2011-04-05 No fix listed CWE-200

TI-2006-00362 CVE-2006-0373 · GHSA-26gj-v5x8-mq2v

Cross-site scripting (XSS) vulnerability in register.aspx in Douran FollowWeb allows…

LOW 22

Cross-site scripting (XSS) vulnerability in register.aspx in Douran FollowWeb allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00938 Published 2006-01-22 No fix listed

Vulnerabilities

Filters

An issue in all versions of Douran DSGate allows a local authenticated privileged…

download.aspx in Douran Portal 3.9.7.8 allows remote attackers to obtain source code of…

Cross-site scripting (XSS) vulnerability in register.aspx in Douran FollowWeb allows…