Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2544▼ 345 respecto a la semana anterior

Críticas / altas1339▲ 68 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2020-19803	Modificada	Alta (8.8)	0.44%	—	Doyocms Project Doyocms	11/4/2023	17/6/2026	Cross Site Request Forgery vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the background system settings.
CVE-2020-19802	Modificada	Crítica (9.8)	1.1%	—	Doyocms Project Doyocms	11/4/2023	17/6/2026	File Upload vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the upload file type parameter.
CVE-2021-26740	Modificada	Crítica (9.8)	1.6%	—	Doyocms Project Doyocms	1/11/2021	17/6/2026	Arbitrary file upload vulnerability sysupload.php in millken doyocms 2.3 allows attackers to execute arbitrary code.
CVE-2021-26739	Modificada	Crítica (9.8)	1.7%	—	Doyocms Project Doyocms	1/11/2021	17/6/2026	SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter.
CVE-2020-19821	Modificada	Alta (8.8)	0.89%	—	Wdoyo Doyocms	26/8/2021	17/6/2026	A SQL injection vulnerability in admin.php of DOYOCMS 2.3 allows attackers to execute arbitrary SQL commands via the orders[] parameter.
CVE-2019-9551	Modificada	Media (4.8)	0.64%	—	Wdoyo Doyocms	4/3/2019	17/6/2026	An issue was discovered in DOYO (aka doyocms) 2.3 through 2015-05-06. It has admin.php XSS.
CVE-2019-7569	Modificada	Alta (8.8)	0.65%	—	Wdoyo Doyo	7/2/2019	17/6/2026	An issue was discovered in DOYO (aka doyocms) 2.3(20140425 update). There is a CSRF vulnerability that can add a super administrator account via admin.php?c=a_adminuser&a=add&run=1.