CVE-2020-19803

CVE-2020-19803 is a Cross-Site Request Forgery vulnerability in Milken DoyoCMS v2.3 that enables a remote attacker to execute arbitrary code via the background system settings. Affected: Milken DoyoCMS 2.3. Severity according to CVSS v3.1 is 8.8 (HIGH). Root cause is CSRF allowing code execution;...

CVE-2021-26740

Millken Doyocms 2.3 contains an arbitrary file upload vulnerability in sysupload.php that can lead to arbitrary code execution. The CVE-2021-26740 entry is corroborated by multiple connected records (NVD, Red Hat advisory, CP AI advisory, CVE listing) all referencing the same issue. No vendor-spe...

CVE-2021-26739

The CVE-2021-26739 entry concerns a SQL injection in pay.php of Millken Doyocms 2.3. The underlying issue is unvalidated input via the attribute parameter, enabling arbitrary SQL execution, with potential high impact per the NVD metrics (base CVSSv3.1 9.8, network attack, no authentication, high ...

CVE-2020-19802

CVE-2020-19802 affects Milken DoyoCMS v2.3. The vulnerability is a file upload issue exploitable remotely to execute arbitrary code via the upload file type parameter (impact: full compromise of confidentiality, integrity, and availability per CVSS 3.1). No remediation or patched version is provi...