Search vulnerabilities

Results 3

Export CSV
CVE-2020-19821

A SQL injection vulnerability in admin.php of DOYOCMS 2.3 allows attackers to execute arbitrary SQL commands via the orders[] parameter.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2019-9551

An issue was discovered in DOYO (aka doyocms) 2.3 through 2015-05-06. It has admin.php XSS.

CVSS 3.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2019-7569

An issue was discovered in DOYO (aka doyocms) 2.3(20140425 update). There is a CSRF vulnerability that can add a super administrator account via admin.php?c=a_adminuser&a=add&run=1.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Products