Vulnerabilities
2 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2024-35324 | Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php. Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php. NVD description · AI analysis pending | 9.8 | 2% | PoC |
| — | |
| CVE-2018-18737 | An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexml_load_string. An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexml_load_string. This can also be used for SSRF. NVD description · AI analysis pending | 7.5 | 1% | PoC |
| — |