CVE-2021-26740

Arbitrary file upload vulnerability sysupload.php in millken doyocms 2.3 allows attackers to execute arbitrary code...

Sql injection

SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter...

CVE-2021-26740

Millken Doyocms 2.3 contains an arbitrary file upload vulnerability in sysupload.php that can lead to arbitrary code execution. The CVE-2021-26740 entry is corroborated by multiple connected records (NVD, Red Hat advisory, CP AI advisory, CVE listing) all referencing the same issue. No vendor-spe...

CVE-2021-26740

Arbitrary file upload vulnerability sysupload.php in millken doyocms 2.3 allows attackers to execute arbitrary code...

CVE-2021-26739

SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter...

CVE-2021-26739

The CVE-2021-26739 entry concerns a SQL injection in pay.php of Millken Doyocms 2.3. The underlying issue is unvalidated input via the attribute parameter, enabling arbitrary SQL execution, with potential high impact per the NVD metrics (base CVSSv3.1 9.8, network attack, no authentication, high ...