CVE-2019-11623

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=siteweb. A remote background administrator privilege user or a user with permission to manage configuration siteweb could exploit the vulnerability to obtain database sensitive...

CVE-2019-11623

CVE-2019-11623 describes a SQL injection in doorGets 7.0 via /doorgets/app/requests/user/configurationRequest.php when action=siteweb. A remote background administrator or a user with permission to manage configuration siteweb could exploit this to obtain database-sensitive information. The cited...