douco kayıtları

douco üreticisine ait 20 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

20 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2019-12564İstismar yok	In DouCo DouPHP v1.5 Release 20190516, remote attackers can view the database backup file via a brute-force guessing approach for data/backudouco · douphp · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%2,0	2 Haz 2019
35İzleyin	CVE-2018-20419İstismar yok	DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account.douco · douphp · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,5	23 Ara 2018
24İzleyin	CVE-2022-24131İstismar yok	DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through /admin/login.php in the background, which will lead to JavaScdouco · douphp · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,9	30 Mar 2022
24İzleyin	CVE-2021-3370İstismar yok	DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via /admin/cloud.php.douco · douphp · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,6	8 Ara 2021
21İzleyin	CVE-2018-20566İstismar yok	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-22 Kimlik doğrulamasız Yol geçişi	Orta5,3	—	%1,3	28 Ara 2018
21İzleyin	CVE-2018-20567İstismar yok	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-732 Kimlik doğrulamasız Hizmet dışı bırakma	Orta5,3	—	%1,0	28 Ara 2018
21İzleyin	CVE-2022-46438İstismar yok	A cross-site scripting (XSS) vulnerability in the /admin/article_category.php component of DouPHP v1.7 20221118 allows attackers to execute douco · douphp · CWE-79 RCE XSS	Orta5,4	—	%0,4	12 Oca 2023
20İzleyin	CVE-2024-7917İstismar yok	DouPHP Favicon system.php unrestricted uploaddouco · douphp · CWE-434 Dosya yükleme	Orta5,1	—	%0,6	18 Ağu 2024
19İzleyin	CVE-2018-20564İstismar yok	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-79 XSS	Orta4,8	—	%0,5	28 Ara 2018
19İzleyin	CVE-2018-20565İstismar yok	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-79 XSS	Orta4,8	—	%0,5	28 Ara 2018
19İzleyin	CVE-2018-20560İstismar yok	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-79 XSS	Orta4,8	—	%0,5	28 Ara 2018
19İzleyin	CVE-2018-20559İstismar yok	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-79 XSS	Orta4,8	—	%0,5	28 Ara 2018
19İzleyin	CVE-2018-20558İstismar yok	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-79 XSS	Orta4,8	—	%0,5	28 Ara 2018
19İzleyin	CVE-2018-20557İstismar yok	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-79 XSS	Orta4,8	—	%0,5	28 Ara 2018
19İzleyin	CVE-2018-20561İstismar yok	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-79 XSS	Orta4,8	—	%0,5	28 Ara 2018
19İzleyin	CVE-2018-20562İstismar yok	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-79 XSS	Orta4,8	—	%0,5	28 Ara 2018
19İzleyin	CVE-2018-20563İstismar yok	An issue was discovered in DouCo DouPHP 1.5 20181221.douco · douphp · CWE-79 XSS	Orta4,8	—	%0,5	28 Ara 2018
19İzleyin	CVE-2022-25574İstismar yok	A stored cross-site scripting (XSS) vulnerability in the upload function of /admin/show.php allows attackers to execute arbitrary web scriptdouco · douphp · CWE-79 RCE XSS	Orta4,8	—	%0,4	25 Mar 2022
19İzleyin	CVE-2024-57599İstismar yok	Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a crafted payload injectedouco · douphp · CWE-79 RCE XSS	Orta4,8	—	%0,3	6 Şub 2025
8İzleyin	CVE-2026-2226İstismar yok	DouPHP ZIP File file.php unrestricted uploaddouco · douphp · CWE-284 Dosya yükleme Erişim denetimi (IDOR)	Düşük2,0	—	%0,4	9 Şub 2026

CVE-2019-12564
40Planlayın
In DouCo DouPHP v1.5 Release 20190516, remote attackers can view the database backup file via a brute-force guessing approach for data/backu
KritikCVSS 9,8İstismar yokEPSS %2
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
douco · douphp2 Haz 2019
CVE-2018-20419
35İzleyin
DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
douco · douphp23 Ara 2018
CVE-2022-24131
24İzleyin
DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through /admin/login.php in the background, which will lead to JavaSc
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
douco · douphp30 Mar 2022
CVE-2021-3370
24İzleyin
DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via /admin/cloud.php.
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
douco · douphp8 Ara 2021
CVE-2018-20566
21İzleyin
An issue was discovered in DouCo DouPHP 1.5 20181221.
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Yol geçişi
douco · douphp28 Ara 2018
CVE-2018-20567
21İzleyin
An issue was discovered in DouCo DouPHP 1.5 20181221.
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- Hizmet dışı bırakma
douco · douphp28 Ara 2018
CVE-2022-46438
21İzleyin
A cross-site scripting (XSS) vulnerability in the /admin/article_category.php component of DouPHP v1.7 20221118 allows attackers to execute
OrtaCVSS 5,4İstismar yokEPSS %0
- RCE
- XSS
douco · douphp12 Oca 2023
CVE-2024-7917
20İzleyin
DouPHP Favicon system.php unrestricted upload
OrtaCVSS 5,1İstismar yokEPSS %1
- Dosya yükleme
douco · douphp18 Ağu 2024
CVE-2018-20564
19İzleyin
An issue was discovered in DouCo DouPHP 1.5 20181221.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
douco · douphp28 Ara 2018
CVE-2018-20565
19İzleyin
An issue was discovered in DouCo DouPHP 1.5 20181221.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
douco · douphp28 Ara 2018
CVE-2018-20560
19İzleyin
An issue was discovered in DouCo DouPHP 1.5 20181221.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
douco · douphp28 Ara 2018
CVE-2018-20559
19İzleyin
An issue was discovered in DouCo DouPHP 1.5 20181221.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
douco · douphp28 Ara 2018
CVE-2018-20558
19İzleyin
An issue was discovered in DouCo DouPHP 1.5 20181221.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
douco · douphp28 Ara 2018
CVE-2018-20557
19İzleyin
An issue was discovered in DouCo DouPHP 1.5 20181221.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
douco · douphp28 Ara 2018
CVE-2018-20561
19İzleyin
An issue was discovered in DouCo DouPHP 1.5 20181221.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
douco · douphp28 Ara 2018
CVE-2018-20562
19İzleyin
An issue was discovered in DouCo DouPHP 1.5 20181221.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
douco · douphp28 Ara 2018
CVE-2018-20563
19İzleyin
An issue was discovered in DouCo DouPHP 1.5 20181221.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
douco · douphp28 Ara 2018
CVE-2022-25574
19İzleyin
A stored cross-site scripting (XSS) vulnerability in the upload function of /admin/show.php allows attackers to execute arbitrary web script
OrtaCVSS 4,8İstismar yokEPSS %0
- RCE
- XSS
douco · douphp25 Mar 2022
CVE-2024-57599
19İzleyin
Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a crafted payload injecte
OrtaCVSS 4,8İstismar yokEPSS %0
- RCE
- XSS
douco · douphp6 Şub 2025
CVE-2026-2226
8İzleyin
DouPHP ZIP File file.php unrestricted upload
DüşükCVSS 2,0İstismar yokEPSS %0
- Dosya yükleme
- Erişim denetimi (IDOR)
douco · douphp9 Şub 2026