CyberSecBulletin

DouPHP vulnerabilities

We track 2 vulnerabilities in DouPHP products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 9, 2026.

2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score

Latest DouPHP vulnerabilities

  • 7.2 High severity

    DouPHP: Improper Access Control

    CVE-2026-2226DouPHP

    A vulnerability has been found in DouPHP up to 1.9. This issue affects some unknown processing of the file /admin/file.php of the component ZIP File Handler. Such manipulation of the argument sql_filename leads to unrestricted upload. The attack can be launche

  • 7.2 High severity

    DouPHP: Unrestricted Upload of File with Dangerous Type

    CVE-2024-7917DouPHP

    A vulnerability, which was classified as critical, has been found in DouPHP 1.7 Release 20220822. Affected by this issue is some unknown functionality of the file /admin/system.php of the component Favicon Handler. The manipulation of the argument site_favicon