Doyocms Project

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-26740 Nov 01, 16:15 CRITICAL POC Act Now

Arbitrary file upload vulnerability sysupload.php in millken doyocms 2.3 allows attackers to execute arbitrary code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE File Upload Doyocms Doyocms Project

NVD GitHub

CVSS 3.1

9.8

EPSS

1.6%

CVE-2021-26739 Nov 01, 16:15 CRITICAL POC Act Now

SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE SQLi Doyocms Doyocms Project

NVD GitHub

CVSS 3.1

9.8

EPSS

1.6%

CVE-2021-26740

EPSS 2% CVSS 9.8

CRITICAL POC Act Now

PHP RCE File Upload +2

NVD GitHub

CVE-2021-26739

EPSS 2% CVSS 9.8

CRITICAL POC Act Now

PHP RCE SQLi +2

NVD GitHub