Dotclear vulnerabilities

Products

• Dotclear 32

Newest

• dotclear Dotclear 2.25.3 Authenticated Remote Code Execution via File Upload CVE-2023-53952 8.7 HighDecember 19, 2025
• dotclear Dotclear 2.29 Remote Code Execution via Authenticated File Upload CVE-2024-58281 8.7 HighDecember 10, 2025
• dotclear A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in Dotclear version 2.29... CVE-2024-27626 6.1 MediumMarch 5, 2024
• dotclear A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in... CVE-2018-16358 5.4 MediumSeptember 2, 2018
• dotclear Cross-site scripting (XSS) vulnerability in admin/users.php in Dotclear 2.12.1 allows remote... CVE-2018-5690 5.4 MediumJanuary 14, 2018
• dotclear Cross-site scripting (XSS) vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote... CVE-2018-5689 5.4 MediumJanuary 14, 2018
• dotclear XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the... CVE-2017-6446 6.1 MediumMarch 5, 2017
• dotclear Multiple incomplete blacklist vulnerabilities in inc/core/class.dc.core.php in Dotclear before 2... CVE-2015-8832 8.8 HighFebruary 9, 2017
• dotclear Cross-site scripting (XSS) vulnerability in admin/comments.php in Dotclear before 2.8.2 allows... CVE-2015-8831 6.1 MediumFebruary 9, 2017
• dotclear Dotclear before 2.10.3, when the Host header is not part of the web server routing process,... CVE-2016-7903 3.7 LowJanuary 4, 2017
• dotclear Unrestricted file upload vulnerability in the fileUnzip->unzip method in Dotclear before 2.10.3... CVE-2016-7902 8.8 HighJanuary 4, 2017
• dotclear Cross-site scripting (XSS) vulnerability in admin/media.php and admin/media_item.php in Dotclear... CVE-2016-9891 5.4 MediumDecember 29, 2016
• dotclear Multiple cross-site scripting (XSS) vulnerabilities in the media manager in Dotclear before 2.10... CVE-2016-6523 6.1 MediumDecember 9, 2016
• dotclear Unrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually... CVE-2016-9268 7.2 HighNovember 10, 2016
• dotclear Cross-site scripting (XSS) vulnerability in Dotclear before 2.8.1 allows remote attackers to... CVE-2015-5651 4.3 MediumOctober 3, 2015
• dotclear Cross-site scripting (XSS) vulnerability in Dotclear before 2.6.4 allows remote attackers to... CVE-2014-5316 4.3 MediumSeptember 22, 2014
• dotclear Multiple incomplete blacklist vulnerabilities in the filemanager::isFileExclude method in the... CVE-2014-3782 6.0 MediumJune 11, 2014
• dotclear The dcXmlRpc::setUser method in nc/core/class.dc.xmlrpc.php in Dotclear before 2.6.3 allows... CVE-2014-3781 5.8 MediumJune 11, 2014
• dotclear SQL injection vulnerability in admin/categories.php in Dotclear before 2.6.3 allows remote... CVE-2014-3783 6.0 MediumMay 22, 2014
• dotclear Dotclear before 2.6.2 allows remote attackers to execute arbitrary PHP code via a serialized... CVE-2014-1613 7.5 HighMay 16, 2014
• dotclear Multiple cross-site scripting (XSS) vulnerabilities in Dotclear before 2.4.2 allow remote... CVE-2012-1039 Public exploit 4.3 MediumMarch 19, 2012
• dotclear Unrestricted file upload vulnerability in inc/swf/swfupload.swf in Dotclear 2.3.1 and 2.4.2... CVE-2011-5083 7.5 HighMarch 19, 2012
• dotclear The updateFile function in inc/core/class.dc.media.php in the Media Manager in Dotclear before 2... CVE-2011-1584 6.5 MediumJune 8, 2011
• dotclear Cross-site scripting (XSS) vulnerability in the administrative interface in Dotclear before 2.1.5... CVE-2009-0933 4.3 MediumMarch 17, 2009
• dotclear Unrestricted file upload vulnerability in ecrire/images.php in Dotclear 1.2.7.1 and earlier... CVE-2008-3232 9.3 HighJuly 18, 2008
• dotclear Multiple cross-site request forgery (CSRF) vulnerabilities in DotClear 1.2.6 allow remote... CVE-2007-3688 2.6 LowJuly 11, 2007
• dotclear Cross-site scripting (XSS) vulnerability in ecrire/tools.php in DotClear 1.2.6 allows remote... CVE-2007-3672 4.3 MediumJuly 10, 2007
• dotclear Multiple cross-site scripting (XSS) vulnerabilities in DotClear before 1.2.6 allow remote... CVE-2007-1989 Public exploit 4.3 MediumApril 12, 2007
• dotclear DotClear allows remote attackers to obtain sensitive information via a direct request for (1)... CVE-2006-3938 5.0 MediumJuly 31, 2006
• dotclear PHP remote file inclusion vulnerability in layout/prepend.php in DotClear 1.2.4 and earlier... CVE-2006-2866 Public exploit 5.1 MediumJune 6, 2006
• dotclear SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to... CVE-2005-3963 Public exploit 7.5 HighDecember 2, 2005
• dotclear Unspecified vulnerability in the Trackback functionality in DotClear 1.2.1 has unknown impact and... CVE-2005-3957 10.0 HighDecember 1, 2005