Browse CVEs

MEDIUM 5.3 CVE-2019-11626 routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as demonstrated by an ajax/index.php?uri=1234%5c request. Doorgets Cms No fix yet Fix from $1,6002019-04-30 CRITICAL 9.8 CVE-2019-11616 doorGets 7.0 has a sensitive information disclosure vulnerability in /setup/temp/admin.php and /setup/temp/database.php. A remote unauthenticated att… Doorgets Cms No fix yet Fix from $2,3002019-04-30 CRITICAL 9.8 CVE-2019-11618 doorGets 7.0 has a default administrator credential vulnerability. A remote attacker can use this vulnerability to gain administrator privileges for … Doorgets Cms No fix yet Fix from $2,3002019-04-30 HIGH 8.8 CVE-2019-11615 /fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability. A remote normal registered user can use this vulnerability to upl… Doorgets Cms No fix yet Fix from $1,9502019-04-30 HIGH 8.8 CVE-2019-11617 doorGets 7.0 has a CSRF vulnerability in /doorgets/app/requests/user/configurationRequest.php. A remote attacker can exploit this vulnerability for "… Doorgets Cms No fix yet Fix from $1,9502019-04-30 HIGH 8.2 CVE-2019-11608 doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/renamefile.php. A remote unauthenticated attacker can exploit this … Doorgets Cms No fix yet Fix from $1,9502019-04-30 HIGH 8.2 CVE-2019-11609 doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/movefile.php. A remote unauthenticated attacker can exploit this vu… Doorgets Cms No fix yet Fix from $1,9502019-04-30 HIGH 7.5 CVE-2019-11606 doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copyfile.php. A remote unauthenticated attacker can exploit this vu… Doorgets Cms No fix yet Fix from $1,9502019-04-30 HIGH 7.5 CVE-2019-11607 doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copydir.php. A remote unauthenticated attacker can exploit this vul… Doorgets Cms No fix yet Fix from $1,9502019-04-30 HIGH 7.5 CVE-2019-11610 doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/downloaddir.php. A remote unauthenticated attacker can exploit this… Doorgets Cms No fix yet Fix from $1,9502019-04-30 HIGH 7.5 CVE-2019-11611 doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/download.php. A remote unauthenticated attacker can exploit this vu… Doorgets Cms No fix yet Fix from $1,9502019-04-30 HIGH 7.5 CVE-2019-11612 doorGets 7.0 has an arbitrary file deletion vulnerability in /fileman/php/deletefile.php. A remote unauthenticated attacker can exploit this vulnerab… Doorgets Cms No fix yet Fix from $1,9502019-04-30 HIGH 7.5 CVE-2019-11614 doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/commentView.php. A remote unauthorized attacker could exploit the vulnerab… Doorgets Cms No fix yet Fix from $1,9502019-04-30 MEDIUM 6.5 CVE-2019-11613 doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/contactView.php. A remote normal registered user could exploit the vulnera… Doorgets Cms No fix yet Fix from $1,6002019-04-30 HIGH 7.5 CVE-2018-20064 doorGets 7.0 allows remote attackers to write to arbitrary files via directory traversal, as demonstrated by a dg-user/?controller=theme&action=edit&… Doorgets No fix yet Fix from $1,9502018-12-11 HIGH 8.8 CVE-2018-11126 dg-user/?controller=users&action=add in doorGets 7.0 has CSRF that results in adding an administrator account. Doorgets No fix yet Fix from $1,9502018-05-15