Vulnerabilities

TI-2020-13709 CVE-2020-19803 · GHSA-xvqp-2r5x-vqjr

Cross Site Request Forgery vulnerability found in Milken DoyoCMS v.2.3 allows a remote…

MEDIUM 40

Cross Site Request Forgery vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the background system settings.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00438 Published 2023-04-11 No fix listed CWE-352

TI-2020-13708 CVE-2020-19802 · GHSA-mmc4-8w6g-5qx5

File Upload vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to…

MEDIUM 45

File Upload vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the upload file type parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01118 Published 2023-04-11 No fix listed CWE-434

TI-2021-08418 CVE-2021-26740 · GHSA-2599-8x3f-96mc

Arbitrary file upload vulnerability sysupload.php in millken doyocms 2.3 allows attackers to execute arbitrary code.

MEDIUM 45

Arbitrary file upload vulnerability sysupload.php in millken doyocms 2.3 allows attackers to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01603 Published 2021-11-01 No fix listed CWE-434

TI-2021-08417 CVE-2021-26739 · GHSA-7fw6-jr78-v4vg

SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to…

MEDIUM 45

SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01681 Published 2021-11-01 No fix listed CWE-89

Vulnerabilities

Filters

Cross Site Request Forgery vulnerability found in Milken DoyoCMS v.2.3 allows a remote…

File Upload vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to…

Arbitrary file upload vulnerability sysupload.php in millken doyocms 2.3 allows attackers to execute arbitrary code.

SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to…