Search vulnerabilities

Results 2

Export CSV
CVE-2024-35324

Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php.

CVSS 3.1 · 9.8 Critical EPSS 2.1% KEV · Not listed
Vendors
Products
CVE-2018-18737

An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexml_load_string. This can also be used for SSRF.

CVSS 3.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Products