douco records

20 published records for vendor douco.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

20 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2019-12564No exploit	In DouCo DouPHP v1.5 Release 20190516, remote attackers can view the database backup file via a brute-force guessing approach for data/backudouco · douphp · CWE-287 Pre-auth Auth bypass	Critical9.8	—	2.0%	Jun 2, 2019
35Monitor	CVE-2018-20419No exploit	DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account.douco · douphp · CWE-352 Pre-auth CSRF	High8.8	—	0.5%	Dec 23, 2018
24Monitor	CVE-2022-24131No exploit	DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through /admin/login.php in the background, which will lead to JavaScdouco · douphp · CWE-79 Pre-auth XSS	Medium6.1	—	0.9%	Mar 30, 2022
24Monitor	CVE-2021-3370No exploit	DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via /admin/cloud.php.douco · douphp · CWE-79 Pre-auth XSS	Medium6.1	—	0.6%	Dec 8, 2021
21Monitor	CVE-2018-20566No exploit	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-22 Pre-auth Path traversal	Medium5.3	—	1.3%	Dec 28, 2018
21Monitor	CVE-2018-20567No exploit	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-732 Pre-auth Denial of service	Medium5.3	—	1.0%	Dec 28, 2018
21Monitor	CVE-2022-46438No exploit	A cross-site scripting (XSS) vulnerability in the /admin/article_category.php component of DouPHP v1.7 20221118 allows attackers to execute douco · douphp · CWE-79 RCE XSS	Medium5.4	—	0.4%	Jan 12, 2023
20Monitor	CVE-2024-7917No exploit	DouPHP Favicon system.php unrestricted uploaddouco · douphp · CWE-434 File upload	Medium5.1	—	0.6%	Aug 18, 2024
19Monitor	CVE-2018-20564No exploit	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-79 XSS	Medium4.8	—	0.5%	Dec 28, 2018
19Monitor	CVE-2018-20565No exploit	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-79 XSS	Medium4.8	—	0.5%	Dec 28, 2018
19Monitor	CVE-2018-20560No exploit	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-79 XSS	Medium4.8	—	0.5%	Dec 28, 2018
19Monitor	CVE-2018-20559No exploit	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-79 XSS	Medium4.8	—	0.5%	Dec 28, 2018
19Monitor	CVE-2018-20558No exploit	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-79 XSS	Medium4.8	—	0.5%	Dec 28, 2018
19Monitor	CVE-2018-20557No exploit	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-79 XSS	Medium4.8	—	0.5%	Dec 28, 2018
19Monitor	CVE-2018-20561No exploit	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-79 XSS	Medium4.8	—	0.5%	Dec 28, 2018
19Monitor	CVE-2018-20562No exploit	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-79 XSS	Medium4.8	—	0.5%	Dec 28, 2018
19Monitor	CVE-2018-20563No exploit	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-79 XSS	Medium4.8	—	0.5%	Dec 28, 2018
19Monitor	CVE-2022-25574No exploit	A stored cross-site scripting (XSS) vulnerability in the upload function of /admin/show.php allows attackers to execute arbitrary web scriptdouco · douphp · CWE-79 RCE XSS	Medium4.8	—	0.4%	Mar 25, 2022
19Monitor	CVE-2024-57599No exploit	Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a crafted payload injectedouco · douphp · CWE-79 RCE XSS	Medium4.8	—	0.3%	Feb 6, 2025
8Monitor	CVE-2026-2226No exploit	DouPHP ZIP File file.php unrestricted uploaddouco · douphp · CWE-284 File upload Broken access control (IDOR)	Low2.0	—	0.4%	Feb 9, 2026

CVE-2019-12564
40Plan
In DouCo DouPHP v1.5 Release 20190516, remote attackers can view the database backup file via a brute-force guessing approach for data/backu
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Auth bypass
douco · douphpJun 2, 2019
CVE-2018-20419
35Monitor
DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
douco · douphpDec 23, 2018
CVE-2022-24131
24Monitor
DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through /admin/login.php in the background, which will lead to JavaSc
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
douco · douphpMar 30, 2022
CVE-2021-3370
24Monitor
DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via /admin/cloud.php.
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
douco · douphpDec 8, 2021
CVE-2018-20566
21Monitor
An issue was discovered in DouCo DouPHP 1.5 20181221.
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- Path traversal
douco · douphpDec 28, 2018
CVE-2018-20567
21Monitor
An issue was discovered in DouCo DouPHP 1.5 20181221.
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- Denial of service
douco · douphpDec 28, 2018
CVE-2022-46438
21Monitor
A cross-site scripting (XSS) vulnerability in the /admin/article_category.php component of DouPHP v1.7 20221118 allows attackers to execute
MediumCVSS 5.4No exploitEPSS 0%
- RCE
- XSS
douco · douphpJan 12, 2023
CVE-2024-7917
20Monitor
DouPHP Favicon system.php unrestricted upload
MediumCVSS 5.1No exploitEPSS 1%
- File upload
douco · douphpAug 18, 2024
CVE-2018-20564
19Monitor
An issue was discovered in DouCo DouPHP 1.5 20181221.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
douco · douphpDec 28, 2018
CVE-2018-20565
19Monitor
An issue was discovered in DouCo DouPHP 1.5 20181221.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
douco · douphpDec 28, 2018
CVE-2018-20560
19Monitor
An issue was discovered in DouCo DouPHP 1.5 20181221.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
douco · douphpDec 28, 2018
CVE-2018-20559
19Monitor
An issue was discovered in DouCo DouPHP 1.5 20181221.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
douco · douphpDec 28, 2018
CVE-2018-20558
19Monitor
An issue was discovered in DouCo DouPHP 1.5 20181221.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
douco · douphpDec 28, 2018
CVE-2018-20557
19Monitor
An issue was discovered in DouCo DouPHP 1.5 20181221.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
douco · douphpDec 28, 2018
CVE-2018-20561
19Monitor
An issue was discovered in DouCo DouPHP 1.5 20181221.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
douco · douphpDec 28, 2018
CVE-2018-20562
19Monitor
An issue was discovered in DouCo DouPHP 1.5 20181221.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
douco · douphpDec 28, 2018
CVE-2018-20563
19Monitor
An issue was discovered in DouCo DouPHP 1.5 20181221.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
douco · douphpDec 28, 2018
CVE-2022-25574
19Monitor
A stored cross-site scripting (XSS) vulnerability in the upload function of /admin/show.php allows attackers to execute arbitrary web script
MediumCVSS 4.8No exploitEPSS 0%
- RCE
- XSS
douco · douphpMar 25, 2022
CVE-2024-57599
19Monitor
Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a crafted payload injecte
MediumCVSS 4.8No exploitEPSS 0%
- RCE
- XSS
douco · douphpFeb 6, 2025
CVE-2026-2226
8Monitor
DouPHP ZIP File file.php unrestricted upload
LowCVSS 2.0No exploitEPSS 0%
- File upload
- Broken access control (IDOR)
douco · douphpFeb 9, 2026