CVE-2020-19802 - File Upload vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the upload file type parameter

CRITICAL

File Upload vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the upload file type parameter

Published Apr 11, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 1.12%

File Upload vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the upload file type parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-11700		Advisory
https://github.com/millken/doyocms		Product

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Apr 11, 2023

Updated Feb 11, 2025

Reserved Aug 13, 2020

Updated Feb 11, 2025

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Apr 11, 2023

Updated Feb 11, 2025

Exploited since n/a