Sql injection

2019-04-3020:29:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.4%

JSON

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php. A remote background administrator privilege user (or a user with permission to manage modulecategory) could exploit the vulnerability to obtain database sensitive information via modulecategory_add_titre.

CPENameOperatorVersion
doorgets_cmseq7.0

CPE	Name	Operator	Version
	doorgets_cms	eq	7.0

References

github.com/itodaro/doorGets_cve