Douphp CVE-2018-20566

MEDIUM

Path Traversal (CWE-22)

2018-12-28 cve@mitre.org

Path Traversal Douphp

5.3

CVSS 3.0 · NVD

Share

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

1

CVE Published

Dec 28, 2018 - 16:29 nvd

MEDIUM 5.3

DescriptionNVD

An issue was discovered in DouCo DouPHP 1.5 20181221. It allows full path disclosure in "Smarty error: unable to read resource" error messages for a crafted installation page.

AnalysisAI

An issue was discovered in DouCo DouPHP 1.5 20181221. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Path Traversal (CWE-22), which allows attackers to access files and directories outside the intended path. An issue was discovered in DouCo DouPHP 1.5 20181221. It allows full path disclosure in "Smarty error: unable to read resource" error messages for a crafted installation page. Affected products include: Douco Douphp.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate and canonicalize file paths. Use chroot or sandboxing. Reject input containing path separators or '../' sequences.

More in Douphp

View all

CVE-2019-12564 CRITICAL Act Now POC

In DouCo DouPHP v1.5 Release 20190516, remote attackers can view the database backup file via a brute-force guessing app

CVE-2018-20419 HIGH This Week POC

DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account. Rated high severity (CVSS

CVE-2022-24131 MEDIUM This Month POC

DouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through /admin/login.php in the background, which

CVE-2018-20567 MEDIUM This Month POC

An issue was discovered in DouCo DouPHP 1.5 20181221. Rated medium severity (CVSS 5.3), this vulnerability is remotely e

CVE-2024-7917 MEDIUM This Month POC

A vulnerability, which was classified as critical, has been found in DouPHP 1.7 Release 20220822. Rated medium severity

CVE-2018-20565 MEDIUM This Month POC

An issue was discovered in DouCo DouPHP 1.5 20181221. Rated medium severity (CVSS 4.8), this vulnerability is remotely e

CVE-2018-20564 MEDIUM This Month POC

An issue was discovered in DouCo DouPHP 1.5 20181221. Rated medium severity (CVSS 4.8), this vulnerability is remotely e

CVE-2018-20563 MEDIUM This Month POC

An issue was discovered in DouCo DouPHP 1.5 20181221. Rated medium severity (CVSS 4.8), this vulnerability is remotely e

CVE-2018-20562 MEDIUM This Month POC

An issue was discovered in DouCo DouPHP 1.5 20181221. Rated medium severity (CVSS 4.8), this vulnerability is remotely e

CVE-2018-20561 MEDIUM This Month POC

An issue was discovered in DouCo DouPHP 1.5 20181221. Rated medium severity (CVSS 4.8), this vulnerability is remotely e

CVE-2018-20560 MEDIUM This Month POC

An issue was discovered in DouCo DouPHP 1.5 20181221. Rated medium severity (CVSS 4.8), this vulnerability is remotely e

CVE-2018-20559 MEDIUM This Month POC

An issue was discovered in DouCo DouPHP 1.5 20181221. Rated medium severity (CVSS 4.8), this vulnerability is remotely e

Same weakness CWE-22 – Path Traversal

View all

CVE-2019-3396 CRITICAL POC

CVE-2019-19781 CRITICAL POC

CVE-2020-5902 CRITICAL POC

CVE-2021-40444 HIGH POC

CVE-2021-27065 HIGH POC

CVE-2019-11510 CRITICAL POC

CVE-2018-13379 CRITICAL POC

CVE-2015-0016 HIGH POC

Same technique Path Traversal

View all

CVE-2025-64446 CRITICAL POC

CVE-2015-0016 HIGH POC

CVE-2016-0752 HIGH POC

CVE-2024-13159 CRITICAL POC

CVE-2024-13160 CRITICAL POC

CVE-2024-13161 CRITICAL POC

CVE-2014-0780 CRITICAL POC

CVE-2024-48248 HIGH POC

Share

CVE-2018-20566 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy