CVE-2020-19821

Published August 26th, 2021

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

6.5

MEDIUM

Affected

1

PROJECT

Description

A SQL injection vulnerability in admin.php of DOYOCMS 2.3 allows attackers to execute arbitrary SQL commands via the orders[] parameter.

millken/doyocms

DOYO通用建站程序，PHP免费开源企业CMS建站系统，官方网站：http://wdoyo.com

GitHub

5