CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 18/08/2024 |
| CVE-2022-46438 | MEDIO5.4 | A cross-site scripting (XSS) vulnerability in the /admin/article_category.php component of DouPHP v1.7 20221118 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the description parameter. | 13/01/2023 |
| CVE-2022-24131 | MEDIO6.1 | DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through /admin/login.php in the background, which will lead to JavaScript code execution. | 30/03/2022 |
| CVE-2022-25574 | MEDIO4.8 | A stored cross-site scripting (XSS) vulnerability in the upload function of /admin/show.php allows attackers to execute arbitrary web scripts or HTML via a crafted image file. | 25/03/2022 |
| CVE-2021-3370 | MEDIO6.1 | DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via /admin/cloud.php. | 08/12/2021 |
| CVE-2019-12564 | CRITICO9.8 | In DouCo DouPHP v1.5 Release 20190516, remote attackers can view the database backup file via a brute-force guessing approach for data/backup/DyyyymmddThhmmss.sql filenames. | 03/06/2019 |
| CVE-2018-20567 | MEDIO5.3 | An issue was discovered in DouCo DouPHP 1.5 20181221. \install\index.php allows a reload of the product in opportunistic circumstances in which install.lock cannot be read. | 28/12/2018 |
| CVE-2018-20566 | MEDIO5.3 | An issue was discovered in DouCo DouPHP 1.5 20181221. It allows full path disclosure in "Smarty error: unable to read resource" error messages for a crafted installation page. | 28/12/2018 |
| CVE-2018-20565 | MEDIO4.8 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/nav.php?rec=update has XSS via the nav_name parameter. | 28/12/2018 |
| CVE-2018-20564 | MEDIO4.8 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product_category.php?rec=update has XSS via the cat_name parameter. | 28/12/2018 |
| CVE-2018-20563 | MEDIO4.8 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/mobile.php?rec=system&act=update has XSS via the mobile_name parameter. | 28/12/2018 |
| CVE-2018-20562 | MEDIO4.8 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article_category.php?rec=update has XSS via the cat_name parameter. | 28/12/2018 |
| CVE-2018-20561 | MEDIO4.8 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article.php?rec=update has XSS via the title parameter. | 28/12/2018 |
| CVE-2018-20560 | MEDIO4.8 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/show.php?rec=update has XSS via the show_name parameter. | 28/12/2018 |
| CVE-2018-20559 | MEDIO4.8 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product.php?rec=update has XSS via the name parameter. | 28/12/2018 |
| CVE-2018-20558 | MEDIO4.8 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/system.php?rec=update has XSS via the site_name parameter. | 28/12/2018 |
| CVE-2018-20557 | MEDIO4.8 | An issue was discovered in DouCo DouPHP 1.5 20181221. admin/page.php?rec=edit has XSS via the page_name parameter. | 28/12/2018 |
| CVE-2018-20419 | ALTO8.8 | DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account. | 24/12/2018 |