Vulnerabilities > Douco > Douphp > 1.5

DATE CVE VULNERABILITY TITLE RISK
2019-06-03 CVE-2019-12564 Improper Authentication vulnerability in Douco Douphp 1.5
In DouCo DouPHP v1.5 Release 20190516, remote attackers can view the database backup file via a brute-force guessing approach for data/backup/DyyyymmddThhmmss.sql filenames.
network
low complexity
douco CWE-287
5.0
2018-12-28 CVE-2018-20567 Incorrect Permission Assignment for Critical Resource vulnerability in Douco Douphp 1.5
An issue was discovered in DouCo DouPHP 1.5 20181221.
network
low complexity
douco CWE-732
5.0
2018-12-28 CVE-2018-20566 Path Traversal vulnerability in Douco Douphp 1.5
An issue was discovered in DouCo DouPHP 1.5 20181221.
network
low complexity
douco CWE-22
5.0
2018-12-28 CVE-2018-20565 Cross-site Scripting vulnerability in Douco Douphp 1.5
An issue was discovered in DouCo DouPHP 1.5 20181221.
network
douco CWE-79
3.5
2018-12-28 CVE-2018-20564 Cross-site Scripting vulnerability in Douco Douphp 1.5
An issue was discovered in DouCo DouPHP 1.5 20181221.
network
douco CWE-79
3.5
2018-12-28 CVE-2018-20563 Cross-site Scripting vulnerability in Douco Douphp 1.5
An issue was discovered in DouCo DouPHP 1.5 20181221.
network
douco CWE-79
3.5
2018-12-28 CVE-2018-20562 Cross-site Scripting vulnerability in Douco Douphp 1.5
An issue was discovered in DouCo DouPHP 1.5 20181221.
network
douco CWE-79
3.5
2018-12-28 CVE-2018-20561 Cross-site Scripting vulnerability in Douco Douphp 1.5
An issue was discovered in DouCo DouPHP 1.5 20181221.
network
douco CWE-79
3.5
2018-12-28 CVE-2018-20560 Cross-site Scripting vulnerability in Douco Douphp 1.5
An issue was discovered in DouCo DouPHP 1.5 20181221.
network
douco CWE-79
3.5
2018-12-28 CVE-2018-20559 Cross-site Scripting vulnerability in Douco Douphp 1.5
An issue was discovered in DouCo DouPHP 1.5 20181221.
network
douco CWE-79
3.5