CVE-2024-57599

Summary

Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a crafted payload injected into the description parameter in /admin/article.php

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://github.com/Arykon/cve/blob/main/douphp.pdf

References

• https://www.douphp.com/
• https://github.com/Arykon/cve/blob/main/douphp.pdf

• ←Previous
• Next→