CVE-2019-11620

2019-04-30T20:29:00
ID CVE-2019-11620
Type cve
Reporter cve@mitre.org
Modified 2019-05-01T19:25:00

Description

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php. A remote background administrator privilege user (or a user with permission to manage modulecategory) could exploit the vulnerability to obtain database sensitive information via modulecategory_add_titre.