zpxlz/douphp

zpxlz/douphp

Unavailable

This project is no longer available (or publicly accessible) from GitHub

Releases0

douphp

Log in to subscribe

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2023-30205NVD↗	= 1.7	May 3, 2023Wednesday, 3 May 2023, 21:15	4.8 MEDIUM	—
A stored cross-site scripting (XSS) vulnerability in DouPHP v1.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the unique_id parameter in /admin/article.php.
CVE-2022-24131NVD↗	= 1.6	Mar 30, 2022Wednesday, 30 March 2022, 12:15	6.1 MEDIUM	4.3 MEDIUM
DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through /admin/login.php in the background, which will lead to JavaScript code execution.
CVE-2022-25574NVD↗	= 1.6	Mar 25, 2022Friday, 25 March 2022, 16:15	4.8 MEDIUM	3.5 LOW
A stored cross-site scripting (XSS) vulnerability in the upload function of /admin/show.php allows attackers to execute arbitrary web scripts or HTML via a crafted image file.