Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2022-24131
Disclosure Date: March 30, 2022 (last updated February 23, 2025)
DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through /admin/login.php in the background, which will lead to JavaScript code execution.
0
Attacker Value
Unknown
CVE-2022-25574
Disclosure Date: March 25, 2022 (last updated February 23, 2025)
A stored cross-site scripting (XSS) vulnerability in the upload function of /admin/show.php allows attackers to execute arbitrary web scripts or HTML via a crafted image file.
0
Attacker Value
Unknown
CVE-2021-3370
Disclosure Date: December 08, 2021 (last updated February 23, 2025)
DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via /admin/cloud.php.
0
