Douco Douphp vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Douco Douphp: 1 record(s), with affected versions and fixes.cpe:2.3:a:douco:douphp
CVE-2026-2226
High · 7.2
CWE-284 Feb 9, 2026
DouPHP ZIP File file.php unrestricted upload
A vulnerability has been found in DouPHP up to 1.9. This issue affects some unknown processing of the file /admin/file.php of the component ZIP File Handler. Such manipulation of the argument sql_filename leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.