Approved changes feed: RSS · Atom
cpe:2.3:a:amcoders:dokans:3.9.2:*:*:*:*:*:*:*
part: a version: 3.9.2 update: *
| Vendor | Amcoders (65fcfaf1-0701-58e2-8595-67e17b029b32) |
|---|---|
| Product | Dokans (bc73ca1c-389b-5ac7-ad44-d06d231696f0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-70841 |
vulnerable | 2026-06-08 07:43:17.036602 |
Details available
CRITICAL (10)
Dokans Multi-Tenancy Based eCommerce Platform SaaS 3.9.2 allows unauthenticated remote attackers to obtain sensitive application configuration data via direct request to /script/.env file. The exposed file contains Laravel application encryption key (APP_KEY), database credentials, SMTP/SendGrid API credentials, and internal configuration parameters, enabling complete system compromise including authentication bypass via session token forgery, direct database access to all tenant data, and email infrastructure takeover. Due to the multi-tenancy architecture, this vulnerability affects all tenants in the system.
Published: 2026-02-03T00:00:00.000Z
Updated: 2026-02-04T19:09:20.147Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.