DoccmsCVEs & Vulnerabilities
2 CVEs affecting Doccms products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
2 CVEs→ All vendors
Most Affected Products
doccms 2
CVE-2019-16192CRITICAL
upload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote attackers to execute arbitrary PHP code through module management files, as demonstrated by a .php file in a ZIP archive.
10 Sep 2019
9.8
CVSS
CVE-2018-18835CRITICAL
upload_template() in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file.
30 Oct 2018
9.8
CVSS
← PrevPage 1 / 1Next →