← Back

Douchat

douchat

Vendor: Douchat • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-35324
1Douchat
1Douchat
Jun 23, 2025
May 28, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php.
CVE-2018-18737
1Douchat
1Douchat
Nov 21, 2024
Oct 29, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexml_load_string. This can also be used for SSRF.