An issue was discovered in DouCo DouPHP 1.5 20181221. It allows full path disclosure in "Smarty error: unable to read resource" error messages for a crafted installation page.
CVSS Score
5.3
EPSS Score
0.004
Published
2018-12-28
An issue was discovered in DouCo DouPHP 1.5 20181221. \install\index.php allows a reload of the product in opportunistic circumstances in which install.lock cannot be read.
CVSS Score
5.3
EPSS Score
0.003
Published
2018-12-28
DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account.
CVSS Score
8.8
EPSS Score
0.001
Published
2018-12-24
Page 2