critical9.8
CVE-2022-38621
Doufox v0.0.4 was discovered to contain a remote code execution (RCE) vulnerability via the edit file page.
Impact
Doufox v0.0.4 was discovered to contain a remote code execution (RCE) vulnerability via the edit file page. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Doufox | Doufox | Version 0.0.4 |