millken/doyocms

millken/doyocms

Releases0

Stars5

DOYO通用建站程序，PHP免费开源企业CMS建站系统，官方网站：http://wdoyo.com

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2020-19802 ↗	Apr 11, 2023Tuesday, 11 April 2023, 18:15	9.8 CRITICAL	—
File Upload vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the upload file type parameter.
CVE-2020-19803 ↗	Apr 11, 2023Tuesday, 11 April 2023, 18:15	8.8 HIGH	—
Cross Site Request Forgery vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the background system settings.
CVE-2021-26739 ↗	Nov 1, 2021Monday, 1 November 2021, 16:15	9.8 CRITICAL	7.5 HIGH
SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter.
CVE-2021-26740 ↗	Nov 1, 2021Monday, 1 November 2021, 16:15	9.8 CRITICAL	7.5 HIGH
Arbitrary file upload vulnerability sysupload.php in millken doyocms 2.3 allows attackers to execute arbitrary code.
CVE-2020-19821 ↗	Aug 26, 2021Thursday, 26 August 2021, 03:15	8.8 HIGH	6.5 MEDIUM
A SQL injection vulnerability in admin.php of DOYOCMS 2.3 allows attackers to execute arbitrary SQL commands via the orders[] parameter.
CVE-2019-9551 ↗	Mar 4, 2019Monday, 4 March 2019, 04:29	—	3.5 LOW
An issue was discovered in DOYO (aka doyocms) 2.3 through 2015-05-06. It has admin.php XSS.
CVE-2019-7569 ↗	Feb 7, 2019Thursday, 7 February 2019, 07:29	—	6.8 MEDIUM
An issue was discovered in DOYO (aka doyocms) 2.3(20140425 update). There is a CSRF vulnerability that can add a super administrator account via admin.php?c=a_adminuser&a=add&run=1.